TLDR: People are lazy about digital security, get badly burned, then act surprised. Don't be that person.