This is why I won't be using iCloud Keychain.
LastPass say that all your details are encrypted client-side via your master password, so they cannot access anything of yours.
There's nothing to stop Apple doing the same - but I suspect they won't.
I hope they are, anyway.