To me the best form of protection is limiting and controlling the data you produce that can be shared. Or arguably even the amount of data you have at rest that can be stolen.