These are all good ideas.
I'm careful with my login. I used my Google account with two-factor authentication to log in on booking. I never signed through one of their web pages. I also only use HTTPS.
It is a small independent hotel, not a chain so it seems a lot of work just for a review.