Don't forget that the LastPass chrome extension has been tricked in the past to extract passwords from arbitrary domains. It's still important to use your brain when clicking links and invoking LastPass's autofill functions.

https://labs.detectify.com/2016/07/27/how-i-made-lastpass-gi...