have the bitcoin-qt client (behind firewall and encrypted wallet), blockchain.info (pretty tough password) and also have the address on my phone using bitcoinspinner for android (could be weak link).
My phone was hacked the other day (posted in off-topic.) I didn't investigate it in detail...just wiped the phone and moved on. I would have a lot of trouble trusting the phone for anything at this point. Certainly not a bitcoin client or access to any on-line wallet with more than a few dollars worth of value. I now don't use it for e-mail on my main e-mail account. Just set up a secondary e-mail for very limited data and use which is a drag (vs. being able to check my mail e-mail from my phone.) I guess I'll do the same with on-line wallets which should be easy enough. I have a Windows machine but would prefer to not access any wallet with more than a few BTC from it as well so this will kill several birds with one stone.
Yeah - phones are worthless for security. I keep less than $25 on mine - in Bridgewalker - just for showing people how it works and giving them a couple of bitcents to get started playing.
If I'm going to be away from home and in need of bitcoin I take my linux netbook with an encypted bitcoin-qt hot wallet loaded with what I think I'll need. I consider that adequate for moderate amounts. I enter passwords with an on-screen keyboard.