LastPass understandably finds there to be no evidence linking the two. Uhm, OK.

But what's also hard to believe is that people storing millions of dollars of "collectables" would not change their passwords on at least a yearly basis.

I know that password rotation for its own sake is no longer best practice, but in this case it still seems quite prudent. No?