Staying with outfits like aol.com and yahoo.com exposes us to the trollers. Throw Google into that as well as any of the other "free" services, and even Office 365.
Those sites are rich mining fields for them. I once had to open a Google account in order to load contacts over to a Google Android phone. Then started getting emails from folks who never emailed me...and with hyperlinks that the senders wanted me to click on...luckily have not done that yet.
I have Norton antivirus (but do not use their cloud services or password storage or Identity Protection) and Malwarebytes.
I avoid giving out phone numbers to all the online services, and make up fake dates of birth, etc., where they demand such.
I never put information into anyone's cloud, but maintain my own "cloud" by keeping all data on standalone external drives, one being the primary working drive which I periodically copy to at least two other external devices. I have had too much data lost with computer hard drives crashing, WD Passport crashing, etc.
When a computer "dies," the information on its hard drive is "out there" unless we tear the machine down and smash the drive with a hammer.
For email, I buy URLs/websites and set up email via them. Small internet footprints like that are less lucrative for trollers to invade. Right now I have arrangements with GoDaddy and Namecheap, tending to go with Namecheap for everything because GoDaddy has migrated to Microsoft Outlook for email service, and that means greater exposure.
Larry
P.S.: I also do not keep passwords on a computer or in a cloud. They are currently located on external drives and SD cards (duplicate copies), and retrievable via a devoted password manager. I could keep them in a notebook, but that would be subject to loss. And using the electronic storage, I can "Copy" and "Paste" user names and passwords instead of having to key them in.
_________________________
Larry W. Williams
RKCC #CM-041
ABKA #046
RKS #1246