What about Enpass?
Enpass came up as a recommendation for me a week or so ago. Arguments about whether you should use cloud services / password vaults aside (it's encrypted before it goes anywhere near external storage, fyi), could this be a better option? It seems alright, and syncs with your choice of Dropbox, Onedrive, Google Drive, Box, WebDAV/ownCloud or a folder. But it's down to how secure their extensions and apps are(n't).
You could also make the argument that this was a white hat discovery and Lastpass admitted to it and quickly set to work. Everything has vulnerabilities. Would you rather just not know about them? Ignorance is bliss? If Enpass or others don't have such reports, part of me is more worried that they just sweep them under the carpet.
Biting the hand that feeds IT
