Interesting!

I worked for a large global company that required umpteen levels of log-on security measures before every employee could access anything on computers.

However, once logged-on every employee was free to 'roam the net' and 'access all emails'. Corporate was constantly issuing statements about hacked internal data and directives cautioning employees about methods to prevent breaches of company information/security.

Maybe, establishing an corporate 'intranet' and/or not allowing access to the 'internet' and unsecured email accounts would go a long way to minimizing cyber-threats! Most employees do not 'need' access to the internet or  email accounts on company computers!

For individual private users, use your best judgment (hard to do when kids make up the majority of online users) !