These are all good ideas.

I'm careful with my login. I used my Google account with two-factor authentication to log in on booking. I never signed through one of their web pages. I also only use HTTPS.

It is a small independent hotel, not a chain so it seems a lot of work just for a review.