Hacks aren't always involved with a phish, keylog, or RAT, one of my oldest accounts was recovered right before free trade it was a pretty basic account like lvl 40 everything and I know it was recovered because the ip was different to mine, and my ips never been changed, it was logged in around November or December right before free trade. If I was keylogged or infected my main with 300m cash pile and my mules with 200-300m each would have also been gone
I agree with you but I wouldn't call it stupidity, a lot of hackers are getting more advanced, think about it a kid hacked NASA 3 years ago, imagine 3 years later how advanced hackers are, how hard is it to hack Runescape, I doubt it's as hard as hacking the National defence system or NASA.
I've never been hacked, its way too easy to prevent. All it takes is some common sense - don't visit sites you're not confident about, don't download cheesy software and don't login on public computers.