There are so many attack vectors around so it more or less impossible to be sure you won't get hacked.

That's one of the things that drew me to to ProtonMail - they assume that they will be hacked sooner or later, and have designed the system so that hackers won't get access to sensitive data.