Data uploaded to Google Drive is not data <i>only you control</i>. You may believe only you control the <i>unencrypted</i> data, but that is up for you to decide. If you read the entire post the author states:<p>&quot;To finish, we want to point out that the security team at LastPass responded very quickly to all our reports and lot of the issues were fixed in just a couple days. It was very easy to communicate and work with them.<p>We have seen media and tweets mentioning that we “hacked LastPass”. We did not hack LastPass. We also don’t feel comfortable with those claims. What we did is find a number of bugs, bad practices and design issues which we used to obtain the vault key and decrypt all passwords in different scenarios. There is no bug-free software and any future research on other password managers would likely have similar results.&quot;<p>... which is doubly worrying if you do not control the data you believe to be securely encrypted.