What happens when A. you click a phishing link which takes your username and password, logs into the real site and downloads all of the data, B. the site is hac

What happens when A. you click a phishing link which takes your username and password, logs into the real site and downloads all of the data, B. the site is hacked and all of the mail on the site including archived stuff is leaked, or C. someone manages it MitM your network, uses a quasi-signed cert to spoof the actual website and reads all of your mail or finally D. the hosting provider is raided, and all data is handed over to an authority? I don't think trusting a third-party with highly confidential financial data is very good practice.