Spot on. Know your threat model, and act accordingly. Practice good OPSEC.