I suppose the tokens are safe to keep on poloniex as long as you enable 2FA.

Of course, to be on the safe side, myetherwallet is the best route.