I actually went back to Xbox.com and added a security proof to my account. I set it up so that anytime a new device (PC, X1, etc) tries to access my account, I need my username and password, plus they text a code to my phone that I also have to enter. So, even if someone does get my username and password and tries to log in from somewhere else they still need the code from my phone. Once you enter the code once on your particular X1 it remembers you do you don't have to do it every time.
It is pretty simple to set up and for those looking for a little extra piece of mind, it is certainly worth a few minutes. If your credit card number is saved on your account, it is probably a good idea.