I don't find thinking of "secure" in an absolute sense really helpful. It all depends on your threat model, so who's going to attack you and what vectors and r

I don't find thinking of "secure" in an absolute sense really helpful. It all depends on your threat model, so who's going to attack you and what vectors and resources they'll have at their disposal. Sure against nation state level attackers it's fair to say that no-one but the most well funded of groups will be able to entirely avoid compromise, but it's definitely possible to avoid most of the lower end attacks that are more realistically a likelihood for most Internet users.