Same. There has been a man in Texas apparently using one of my early Gmail accounts for tons of important things for a decade at this point, to the extent that I know his name, address and phone number, and could definitely gain access to his cell phone and car insurance accounts if I wanted.
I know he doesn’t have access to the account, and I see all of his e bills and password reset attempts every few months, so I’m not really sure what his problem is. I kind of assume it’s an elderly person who pays for things with checks and doesn’t notice that he can’t access any of his online accounts, and then occasionally the kids try to pay a bill for him and try to reset the account passwords but can’t.
So if you are reading this, Mr Alvarez of Waco TX, don’t worry - I’ve got you covered and your greedy kids won’t add lines to your cell phone plan on my watch!
Right, there is no lazy replacement for good opsec. If you are facing a state actor then you need to assume your device storage can be accessed.