I think the point is that "Turn off your computer and personal devices when they’re not in use." is not an effective security measure. (What are you worried abo

I think the point is that "Turn off your computer and personal devices when they’re not in use." is not an effective security measure. (What are you worried about? Malware? Malware can steal your account just as easily when you _are_ using your computer as when you aren't.) Some of the other advice in that section is also rather questionable. (E.g. "Your password should not contain “real” words".)