I can't count the amount of times I've lost or been robbed physical bills. Never once have money siphoned out of my online bank. I don't use cash anymore, I'm all digital, and still use a VPN to watch porn.
Turns out different people have different threat models. My threat model includes my neighbour, my ISP (to a certain extent), my employer (again, to a certain extent), private companies like Google or Facebook, burglars, thieves, and scammers.
It doesn't include the NSA, the government, the NSO group, banks, or North Korean government-sponsored hackers. If you think you can defend yourself against the NSA, lol. Good luck.