bitcoin-qt all the way.
super strong password. regular multiple redundant backups of wallet to a variety of media.
I don't trust any kind of online wallet. Even if the business itself is sound and ethical you never know what kind of regulatory framework could be imposed on it overnight. Just look at what's happening in Russia atm!