Thats interesting and i hear that the first time.
Really? This has been well established since blockchain.info wallet was first announced. How did you manage to participate in this forum long enough to become "Legendary" status without understanding that blockchain.info receives encrypted private keys and does not receive the decryption key?
So the only thing that could compromise that would be when blockchain info somehow could achieve the passwords. Maybe by fetching them from the start or getting them with a compromised script, delivered by a corrupt employee, to the customer.
Correct, if the user receives a compromised web page (or if the user's browser or computer is compromised), then their password and their private keys can be captured and transmitted to the criminal.
This is what I was thinking...
I grow very tired of arguing facts with people so I just leave lol.