My usual lecture at our security events: “If you enable two-factor authentication on your accounts, so that the account texts you when someone tries to access it from an unusual location or with the wrong password, it really enhances your security level.”
My new lecture: “You’re all fucked. Just fucked. Build a Faraday cage and don’t connect to anything outside of it. Did I mention fucked?”