The criterion I use for everything privacy- and safety-related is not whether some mysterious Russian hacker is going to crack my email passwords or my wallet keys.

I am not worried about that type of financially-motivated threats, because I can hid in numbers -- there are literally millions of targets as hard (or soft) as I am which can yield orders of magnitude more money than I would. So I bet on a small probability of being attacked.

The real threat for me is the infinitely hungry, infinitely abusive, infinitely relentless State, who doesn't want to control and break the top 1%, but the bottom 99%. As such, I am part of the priority target, and I have good reason to want to protect myself against it, with top priority relative to other threats.