That is how it actually works. However, if this still causes you to doubt, then you should log into the LastPass web site and set up MFA/2FA. That way, even your master password is not enough to gain access to your vault, and someone finding your Master Password would still need your second method of authentication.
