broadly yes, but the real question is: what's your threat model? https://ssd.eff.org/glossary/threat-model