You also have to generate it in a secure fashion, if you use shady software on a computer clogged with viruses, you may have your coins stolen.
Using a Linux cold boot USB is not perfect, but it is the best most people can practicably (without buying a hardware wallet or using multisignature addresses) achieve.
Another security hole is the route to the printer, which is why I use wallet encryption in the first place.