thats why i don't have any credit card or paypal links anymore on steam, origin, Nintendo, PSN, or xbox live. i fund them with cards i purchase at best buy/gamestop (with a credit card) so that way if i ever do get hacked, the max I will lose is my wallet amount and not unlimited money.
credit card and account fraud is insane and "strong passwords" do literally nothing anymore, people are hacking in via much more sophisticated ways. My parents credit card was recently "hacked", and by that I mean a physical card was used at a Target and Macys IN THEIR TOWN and we verified they still had both their credit cards. They didn't get charged of course and the second charge triggered an account shut down (since they don't use the card much) but the rep I talked to said its becoming possible for thieves to duplicate cards physically with minimal contact, either restaurant waiter or even someone standing near you at a gas station. There are big gangs in every town now who print their own fraud credit cards and buy the numbers/3 digits/ZIPs from internet hackers and local shady people.
Its totally insane, I now have all my credit cards send me an email for every single charge I make so I can keep an eye on shit. ups the email volume a lot but doesn't let through crazy charges. Of course if my gmail gets hacked I am fucked, I enable two step authentication but then I can't lose my phone now or I am fucked. I think the whole fraud problem is going to get insanely bad before it gets much better.