[simias]

>But OTOH Firefox Lockwise/Sync is client-side encrypted, and the server just holds an opaque data blob for you.

Back when I used lastpass that's also how they handled it (you can read through their open source command line client to see how it's implemented under the hood, it's fairly straightforward).

I agree that its UI was pretty clunky though.