...which is why I only get online using my corporate VPN, and never visited any sites that required a login (banking, blog, yadda yadda).

Of course that's assuming the VPN is secure enough...i'm sure there's a way around everything. Hell, just connecting to the WiFi and checking your email can give anyone your password if they have half a brain.