using a throwaway email for any accounts you actually use
When I say "throwaway," I don't mean "I forgot about it, and I no longer have access to it, and I picked a really stupid name and password."
I mean: "this is not the same email that I use to do my primary banking and contact my grandmother."
I have two-factor authentication set up for everything that supports it. I just looked it up, and PSN supports it. Yes, that doesn't mean it's immune to being hacked, but my use of a "throwaway" email address doesn't do ANYTHING to increase the odds of my account being hacked, for anything.
If you won't admit that, I don't care to discuss this with you, any further.