Many people are afraid due to the spread of hacking into many accounts and some of them consider that the security of those accounts are very weak ( especially after their accounts are hacked) and they bear all the burdens on the forum.
In my opinion, the problem is not the weakness of security, but in fact, it is your misbehaviors that lead to your accounts ( users) being hacked.
When your account is well secured , the hacker cannot get your password. So it's very essential to protect your account through two simple steps :
1- Choosing a powerful password.
2- Secure your Email ( Strong password, Step verification ( by a phone number) ,Encrypt it through a special key).
I agree with you because most of those who hack is because their password is too easy so easy to hack easily master their account.
maybe I'll add # 3 to your suggestion: it's not easy to click incoming links via email messages or bitcointalk accounts, learn carefully because most are hacked through PM