I would add another point - use antiviruses on your devices, which will protect you from phishing activities, especially when you log into your emails.
Using a virtual machine for getting access to your wallets and exchanges is also a common practice (though not everybody is technically smart enough to install and operate a VM).