I vaguely remember recovering a LastPass vault with email confirmation in ~2015, that would be a glaring security hole so maybe my memory is wrong, can anyone c

I vaguely remember recovering a LastPass vault with email confirmation in ~2015, that would be a glaring security hole so maybe my memory is wrong, can anyone confirm that I’m totally wrong and that LastPass don’t have a back door into all accounts?