Very good advice. Couple thoughts: First, Google’s Password Alert extension should be added to the list of extensions. Best protection against spear phishing.

Very good advice. Couple thoughts: First, Google’s Password Alert extension should be added to the list of extensions. Best protection against spear phishing. Secondly, “Assume that anything you say on Slack or in Twitter direct messages will one day be public. It's fine to use Slack for coordinating and organizing, but be mindful of the conversations you have there. Move private discussions to Signal.” This “eventually public” argument they say is the best framing of the benefit of end-to-end encryption I’ve seen so far. It’s not about “hackers could hack Slack and own your data now!” as much as “eventually any interesting cloud data that’s unencrypted will be made public.”