I suspect 'strava theft' is largely a myth, but I'm also in the habit of starting and finishing my gps logging near the main road a few hundred metres away, on my way out and then in. Also I quickly check the gpx and trim ends if necessary before uploading. I found that overlapping Strava exclusion zones are fine, but some 3rd party strava apps ignore the exclusions, and also if one uses any other sites apart from Strava, they may not have 'privacy exclusions' anyway, e.g I find ridewithgps (no privacy afaia) better for some aspects of ride 'analysis' such as selecting parts of the rides and looking at different av/s, and route planning.