I believe, when you set this up, they re-encrypt your data with the other user's keys so it's never accessible by Lastpass.
You have a key, which encrypts a shared key.
Your spouse has a key, which encrypts the same shared key.
Vault is encrypted with the shared key.
Access is controlled separately. But upon successful share, their existing key can decrypt the shared key which decrypts the vault.