that would be why you enable 2 factor or yubikey....

and not use guessable passwords, and disable java/javascript on websites by default.