is a safe password enough to not get hacked?
lets say you have an account on MTGOX with a password that contains big and small letters
extra keys and numbers and is over 20 caracters long
is there still a chance getting hacked?
(except phising,keyloggers)
phishing is quite easy to avoid by using certificate-patrol.
keyloggers are quite easy to defeat by using keyscrambler.
Keyloggers come in 2 forms:
Hardware - which no software can protect you against - this comes in the form of a device physically sitting between your keyboard and computer
Software - depends on a lot of variables, but you should generally assume that if a malicious party has code running on your computer that it is completely compromised
Phishing is easy to avoid with a few simple precautions in most cases
To answer the more general point: proper information security is a hard problem, people make mistakes and private keys or exchange/wallet credentials leak to the bad guys