Replying-to-myself: as a reference for my last point (the false sense of security), here's an essay I wrote about the common myths of IP addresses, and how trivially easy it is to obtain someone's IP address without their even commenting on your journal.