@julia i am a "cybersecurity professional" and can confirm this is sage advice