You have to consider what the security landscape looked like when LastPass got going in 2008. The common practice for non-technical people was (or still is) to

You have to consider what the security landscape looked like when LastPass got going in 2008. The common practice for non-technical people was (or still is) to reuse the same password everywhere. A password that's really easy to remember like "p@$$word". In this context, the common alternative to LastPass isn't best practice, it's worst practice.