Nobody can be fully protected, but I think it might shock you to see the reality out here. I have Fortune 50 customers whose security programs are woeful. Seriously, that bad. Cringeworthy, nail biters. Hell, my mom worked for a top 3 insurance company for years and from day 1 she was an admin on her laptop, handling HIPAA compliant data locally. It is often that bad, and a lot of companies are hardly trying.