Sad part is that, even with all of this, you're only as secure as each service not being otherwise breached, and that scenario is probably more likely in aggreg

Sad part is that, even with all of this, you're only as secure as each service not being otherwise breached, and that scenario is probably more likely in aggregate than your credentials being compromised. We are all as vulnerable as the engineering practices of each service with which we engage. We (especially in the tech community) tend to focus strictly on tech solutions. But, one of things that isn't discussed nearly enough is the legal aspect of all of this. That is, penalties for hacking, international cooperation, etc. As it is, the scammers have an unlimited free pass to just keep coming at us/services. The worst that can happen to them in most cases is that they simply don't get what they are after. It's all upside and little risk. With that motivation, they will simply persist until they find the weak links.