We should be mostly protected if we use a different username and password on each site, correct? At least using different and difficult passwords on each site should also be ok, right?