Narrower blast radius than the 2022 LastPass breach, at least the vaults weren't touched.