Not sure how true this is but cybersecurity guy at my last job told me that basicly nothing will keep you safe from a determined and capable state actor, but the vast majority of threats actually come from random people out for a buck.