So the LastPass vault itself is a web application? If that is the case, I'm a little flabbergasted. I use 1Password (not associated with them at all, just a re

So the LastPass vault itself is a web application? If that is the case, I'm a little flabbergasted. I use 1Password (not associated with them at all, just a reasonably happy customer). The 1Password app is a native application which as far as I know has no vulnerabilities like this.