And yes, you are.

At some point you have to trust something.

Even if my LastPass account is compromised, and all my passwords are available, everything that's critical - bank, Apple/Google/MS/Amazon/LastPass itself/etc accounts - is secured with 2FA to my phone anyway - so The Terrorists would have to physically obtain that (or clone my SIM and intercept the SMS messages, at which point if you're that interesting to the kinds of people who have those capabilities, you've got bigger problems) to get anywhere.