There's no such thing as a secure product, but secure enough. And lastpass storing billions of password is a very high value target. They probably have hackers banging on their firewalls all day, every day