Yeah, its important to understand what the realistic threat is that you are working with and build around that, anything more is just giving you extra work.

Though it is probably healthy to play around with a more extreme possibilities to see where you can improve on for your privacy and security. Thats the idea though - play, assume you're in uncharted territory and play carefully until you have your bearings.