It's more about likelihood and trust in the service - then anything else.
All systems can be hacked, all data online can be stolen, but if the data is encrypted by the service provider using a complex password that only I know, then the time it takes to crack becomes technically unfeasible in a brute force attack (given a sufficient security model)
Neither service should have any knowledge of the master password, both services claim they have no knowledge of the master password. Therefore, if the information is stolen it is because of something I did wrong on my end that gave up the password (eg: phishing etc.)
Yep LastPass has been breached, and perhaps even copies of people's encrypted vaults stolen. Perhaps even some of those were stolen in 2005 such that 16 years later brute force was able to identify at least some of the users who had weak passwords.
It is my assertion that the time it would take to access the accounts created above would take more then my remaining lifetime on earth before the data can be accessed. If I am correct then LastPass/1password is providing the correct transparency and security as stated on the website/terms of service.
If I am incorrect, well then, I guess we shall see.
The question remains just how long will it take for someone to find out the keys
1 day
2 weeks
4 months?
1 year?
10 years?
100 years?
My personal bet is somewhere in the 70+ year range, though who knows what will happen in the next 70 years :-)