I don't understand how these types of things are safe when the person who makes them has access to your private keys.
No they don't. Only you have access to your private key, you are the one who assembles the letters in order, not the manufacturer.
One question with that. BTC addresses have checksums. Don't private keys too? How do you do that manually than?