I use MAC address exclusion, am I screwed. (No personal financial info on internet connected computers)
It's pretty worthless. MAC addresses are broadcast and easy to obtain.
Simplest thing to do is use a long, easy to remember, hard to guess, password phrase like "IHadADogNamedBingo".
And then don't tell that to anybody.