They have a history of trying to explain away their security problems as not really their fault. That alone should give any LastPass user pause.
And there's nothing in their response that tries shifting the blame: https://blog.lastpass.com/2016/07/lastpass-security-updates....
This was not necessary for this attack to be successful on the default configuration of the tool. That's what I take issue with.
I feel like I'm reading some person's pet Wikipedia page. If they do then at least give some examples. You can't just say damning things and expect everyone to take it at face value.