You don't wanna get hacked but basically everyone gets hacked, so it's more of a question of "how well does your security and monitoring stand up to hacking?"

The big red flag here is that they didn't catch it for so long! How did they not notice?

In the short- term, definitely. An argument that I’ve heard before is that in the long-term, companies like LastPass will gain improved security through fixing the holes that are breached.

“What doesnt kill you makes you stronger”, so to speak.

I’m thinking that something like unrestricted dev access for four days would be more like a death blow, though. I suppose that depends on how much source code was exfiltrated and how many backdoors got planted in systems, etc.