Common sense isn’t so common, though. That’s why I’ve got 2FA on everything, a VPN, and a separate email just for my gambling accounts. Overkill? Maybe. But I sleep better at night.