The unencrypted website URLs is crazy bad. Even before the hack, that means LastPass themselves know every website saved in every user's vault. Forget about the

The unencrypted website URLs is crazy bad. Even before the hack, that means LastPass themselves know every website saved in every user's vault. Forget about the hackers. What was LastPass doing with this information? I have to wonder if LastPass is implemented as a huge multi-tenant database keyed on user and website URL...? Lunacy.