Quite scary, though. That the process for this was quite simple for them to obtain the funds.

I would never personally, allow another service to backup my wallet, keep the secret phase somewhere safe, and every time I wish to access the wallet, just manually re-enter each time.

Just never share your secret phase with anyone.