"TLDR: Buy BTC, Move BTC, Use BTC."

I agree. Add this: "Don't keep all your eggs in one basket".

Allinvain's loss of (equivalent) $500k USD should be a reminder to everyone to keep wallets secure, in smaller amounts kept apart and never, ever reuse usernames and passwords.