Yeah, in theory those recovery keys should still be secure, but you know for certain that a hostile attacker has the encrypted secure note, and without any confidence in lastpass it makes sense to change them as well.
Unfortunately this means you look exactly like someone doing an account takeover and changing the password and recovery keys on the account.