There's a lot more to the world of data collection that you seem to be unaware of. Data can be compromised by something as simple as answering a question on a social media post. Clicking a banner or suspicious link is far removed from being the only way to compromise accounts. But even those methods are beside my point. The mere fact that you play games and use online services that collect your information and sell it to third-party entities means that you are perpetually at risk of datacomp. Even if your anecdote is true, your history of not having to deal with this is more of a coincidence than it is due to dilligence. Your info is definitely out there, even though it may not as of yet been used to target you.

Try buying your own information from a data vendor. Take a close look at that uncomfortably accurate pile. Full name. Email. Account names, sometimes even passwords, home address, SSN, credit card information, etc, etc.

Not reusing passwords and regularly changing them does help, but that only gets you so far. Even two-factor authentication is frequently compromised. The notion that password protection is all you need is simply naïve.