How many programmers work on last pass? From a solo coder with no specific interest in cryptography I wouldn't find this kind of flaw odd.
From a large development team whose sole product centers around encryption? It seems strange to get it this wrong. What leads to that might make a good business case study.
From a large development team whose sole product centers around encryption? It seems strange to get it this wrong. What leads to that might make a good business case study.