How is the user able to recover a lost password using only their secondary 2FA device? This page on your website suggests that you can remove the master password on anyone's fault if they authenticate via their 2FA device.

https://support.logmeininc.com/lastpass/help/recover-your-lo...