We know our data has been left vulnerable, or sold, or misused. But do we really understand what that means for our safety and security online — and when it actually matters?