It sounds like the password is still safe enough, but it's a very unfortunate, inconvenient timing indeed.
I have it generate passwords on new sites and any site where I need to change a password due to breaches and whatnot. I haven't known my facebook password for over 12 months. It's some random bunch of characters, and that makes me feel good.
I've enabled 2FA with Google Authenticator and it sounds like, after this breach, any new device that tries to get on my lastpass account has to be authorized over email.
They really appear to take security seriously. I guess they should since that's really their only game.
OTOH I'm not terribly sold on LastPass's UI, either.
I don't know, but I'm going to sleep a few days over it and check out my options on the weekend. This isn't an "everything's on fire" event, anyway.