You don't log in on very sensitive services (i.e. mail). You log in on not so sensitive services (i.e. github, if you don't have any private repos) and you ALWA

You don't log in on very sensitive services (i.e. mail). You log in on not so sensitive services (i.e. github, if you don't have any private repos) and you ALWAYS use two factor auth. Always. For very sensitive services you're either staying away for 8h/day or use your phone, connected via 3G/4G (not wifi). You know the saying, my house, my rules :) It's _their_ pc, their internet connection. Depending on your country, there might be some laws that will prevent them to scan your traffic. Or not.