Exactly, only those who are really careless will be compromised with this method. Keeping your key and avoiding clicking phishing sites are the best method of prevention. Dont believe in such article lurkings without any valid proof. Some are just creating nonsense fud.
Yes, I think a big carelessness when that happens, yeah right don't just carelessly click on the link attached in the email or the application message if the sender isn't certain. For emails must be suspicious of all shared links, so make sure, make sure and re-make sure before clicking on it