To me secure account you need to stake your bitcoin address and used a complicated password that could be very hard for people to guess or memorized that is all. I don't think killing oneself with various security can still help you, just that people are too lazy to use strong password. I think I have came across a user here who said immediately he logout his account while login back he would have to reset his password to have new password because he always forget his password.