I think the best way to store them is with web wallets that have SMS protection.
Definitively not.
They way you log into a website, doesn't change, that if they get hacked or go rough, your Bitcoin are gone.
If you want to use a webwallet use something like
https://greenaddress.it. It is multisig, so someone would need to hack both the website and your device to steal your funds.