An issue was raised for this over on GitHub[1] after it was pointed out by others.

Quite an interesting example of how easy it is to slip up and make something trivially crackable.

[1] https://github.com/lesspass/lesspass/issues/48