Anyone use a VPN?

[ppppenguin]

Put another way, the precautions you take should be proportionate to the threats. For the average internet user, nobody cares about your emails, messages or even your pr0n habits. You need to protect yourself against malware so your banking etc isn't compromised and you don't become part of a botnet that's used to attack others. You also need decent backups, but that's just sensible precaution against equipment failure as much as attack.

At the other extreme if you're an activist living under a repressive regime then you've got a lot to lose. You need every bit of security you can get. Or if you're a wealthy organisation with trade secrets then you're an obvious target; you should be employing good security people.