in most cases i've seen, the problem weren't the service but the user.
people use weak password, infected computers, dont store the privkey in a safeplace and, when the hack happens, "the problem were the wallet".

if you're not careful, doest matter if it online or not, you will be hacked eventually.