Good question, best practice is to work offline when the project gets serious enough on a computer that is cut from the internet, and you only connect it when you have to test network, test alphas and when the game come’s out.
They are going to hack into your computer if they find it very interesting.
These people exist, they are real, and they are here on this forum under various id’s.