You're right. I think a lot of people who didn't grow up right at the cusp of the internet weren't actually taught any internet safety.

Rule 1: never tell anyone your ASL, especially location.

Rule 2: No personally identifying details. If you could get doxxed using this information you shouldn't be putting it online.

Rule 3: Runescape will never ask you for your password