Indeed. The best way to not have information stolen is to not have it, and particularly not have with someone proven to be incapable of security. http://www.softwar.net/stupid.html

EDIT: add after the comma.