Why doesn't it though? The paper referred to in this "ad" is from 2013. That's 7 years ago. And LastPass is very good at responding to issues. Clearly they don't see this as a problem?