Other good stuff...
In theory, if you are email verified, they can get into your email and obtain your data so that's no good. For "Password Recovery", the hacker needs to not only know your email, but also either get in or intercept the message, so setting your email to something obscure and impossible that the joymax checker still says OK is ideal, cuz that way even if they guess correctly for secret answer and email, it won't send the message ^_^
So basically from there, only way you can get hacked is from keyloggers and scammers.
Also, don't post on the silkroadonline.net forums with your real account, especially if it's set to display your real character cuz there are ways to obtain ID from posts through the forum so yea, it's best for on your real account to set it to a character that you don't care about and if you do feel the need to post there, do it on a dummy account.
As for the trust thing, it sorta depends. Like there are some people who you will have been friends with from long ago, trusted each other with items, followed each other into servers, that eventually you can trust, like I got 1 friend like that who we trusted each other with our accounts and neither stole anything from each other up until the moment he quit, and he just gave em all to me now =/. But anyways, that's only some situations (like part of the reason for staying in silkroad is because of friends so if your friends are willing to betray you for items, why play in the first place). For every 1 like this tho, there are probably 20 people who get screwed over so just never give away info for an account that you don't know the secret answer for (a friend of mine gave his info to a friend long ago, who did nothing bad but a friend of this friend was there IRL and later pked hundreds of people and gave away the info in public chat, and my friend didn't know the secret answer of his account so he lost it. So it's realy hard to tell, cuz I mean honestly your friend could have a keylogger on their computer, so being accountable for 2 different pcs is twice the risk...so it's really an iffy subject. Avoid if possible.
As for firewall, I'd also go with zomealarm free
Just kidding, zonealarm is a piece of shit, sorry if anyone installed that (it truly is horrible, It actually CAUSED my pc to crash and run slower, and it's supposed to protect from things that do that lol :P)