If you stay on Firefox + LastPass, set vault timeout to “On browser restart” and never check “Remember password” to minimize local exposure.