This was good work by the researchers though.

However: if you used the bookmarklet feature of Lastpass, it looks like this vulnerability is as bad as password manager vulnerabilities get.