> LastPass is an enormous target, obviously. And, I guess, the inevitable has happened: Encrypted trove of passwords is "out there".

This is why a company’s bug bounty should be the sum of the assets protected by the data they have, for all their customers, minus $1.

Sounds crazy? Don’t store all passwords at the same place.