Last year (or the 1 before, lost track of time), I had a prKey stolen by 1 of those fake repositories with a virus. Fortunately, I used a wallet with very few funds and in a virtualized environment, so I didn't compromise anything serious. Security measures are never too much.