-
Re the LastPass issue: sending your passwords to 3rd party is naive, but doing it in a browser plugin is irresponsible.
-
A browser plugin is by design an accessible API for any web site and as such very vulnerable to 3rd party attacks.Standalone app not so much