Why a Passphrase, Proper Coin Control, and Portfolio Hygiene Are the Real Security Trifecta