Hello,
I'm sorry for any confusion.
The domain @m.lastpass.com is one that we regularly use with regards to mobile use of LastPass, and can safely be added to your trusted senders list.
Yes, although I have not clicked on it. Ironically, it is asking about Password Management when Last Pass seems unable to retain my last password entered in my account.