The thing is that it's decentralized. So there's not supposed to be any single point of failure where a hacker can hack all users at once, like when they steal facebook data an billions of users are affected at the same time.
Discussion
Yes, we like decentralized, but also want security in everyday use. The question caused by this is: What is the close monitoring of posts needed to not broadcast your private key inadvertently?