[JTon]

I like this approach. But how did you mitigate the risk of a more serious data compromise like identity theft? Did you wait until she understood the dangers before allowing her to use sensitive logins like banking and email?

[Raphmedia]

Online transactions weren't as safe and ubiquitous back then. She already had a paranoia of entering those informations online and we told her that her instinct was right.

She does some Amazon orders every now and then but that's it.

[soneca]

Good question and good answer through your rhetorical question too. GP approach with your addendum is the way to do this in my opinion.