What nuances and secrets you know
Download the offline wallet generator from bitaddress.org or walletgenerator.net 's github page to your usb disk. The securest way is to create your private key on a freshly installed linux PC without any internet connection. Then use one of those offline paper wallet services and print your keys on a paper. You can't have a safer way than this.
*mind blown*
Holy shit rust, this never occurred to me. Was always wonky about using both these services because frankly, I really don't trust anyone or anything when it comes to cryptos, decentralization and trustlessness is key here. Of course I can download an open source app and run it on a not connected computer. Duh, dammit. Hindsight be damned, this should have been obvious

Now that I'm thinking about it, did everyone that used brainwallet, eventually get compromised? Generating a private key off of a phrase seemed like a poor idea, but did that pan out? Off topic, but bit address got me nostalgic

Listen to the man. He knows his shit.
Brainwallet is only as safe as your passphrase. If people had chosen a strong phrase, they wouldn't have gotten hacked. It wasn't brainwallet's fault. It was people were being stupid. If you choose "1" for your passphrase, you deserve to get robbed. Brainwallet is not moron proof.
As for bitaddress/walletgenerator, they have been here for a very long time and i've never ever heard anyone who lost his funds from an address generated by those services. So yes they are perfectly safe to create private keys.
*don't bother with hardware wallets. They are completely unnecessary to have. The only thing you need is a piece of paper.