I like your shorter list - but I'd suggest concerned people also avoid the obvious attack surfaces: * Windows * storing data on other people's computers (clou

I like your shorter list - but I'd suggest concerned people also avoid the obvious attack surfaces: * Windows * storing data on other people's computers (cloud apps) (Yes, they're all safe under the right circumstances. But the right circumstances are far from universal.) And loosing access to important stuff can be worse than other people seeing the stuff - anything behind a google (etc) account can be lost in a moment, due their mechanised decision making and inability to meaningfully contact humans. If you can't always easily contact a helpful and authorised human, the continuing existence of your stuff is a gamble. And no, setting off a twitter storm and hoping that the company will be embarrassed into restoring your data is not a suitable contact method!