I know this has happened to some people
They wanted to post their address into some block explorer but copy paste still had a private key
Another day they log in and poof all the btc is gone

stay safe my friends!!
It seems to me necessary to include two-factor authorization if possible. Additional measures of protection have not harmed anyone yet!