Could the Chrome plugin redirect to webpage which would end in lastpass.com?
The current way of logging into chrome plugin is extremely difficult tell, if that login request comes from authentic plugin or some shady plugin that has been managed to sneak into chrome.
If not possible, would there be some other ways to make it extremely clear, that the plugin Im entering my credentials is the correct one?