I read it, and it's a good read. Ultimately, just as you say, your security is up to you. PGP every single bit of sensitive information, and only deal with vendors who adhere strictly to the same policy. Thanks for sticking it out, and may your packages be overweight and of high purity!