Open source is no panacea when it comes to security. OpenSSL's Heart Bleed vulnerability comes to mind.

You also have to have qualified and dedicated people regularly reading and testing the code. I'd rather LastPass hired more security experts who we could be sure were testing the code.