Krazriko and Kruncha- Thanks very much for your understanding and input. Whenever we deal with Private Keys, nothing is sent or seen over the internet. Regarding the generation of your Private Keys, this is done on a page using client-side javascript and is
never revealed online or transmitted in any way. Your Private Key is in fact not seen online, or by us. For someone to get into the system you referred to (the client-side webpage where you enter your Private Key), they would have to be hacked into your individual computer and watching what you were typing. When you want to create a transaction, you do enter the Private Key on your computer on the client-side webpage, and when you click submit the Private Key is not submitted- ONLY the transaction string and other public information, like your public Bitcoin Address as well as that of the recipient.
The webpage, including the java-script program, is sent over the internet onto the user's computer- and then, on the user's computer the Private Key is generated. However, if you're paranoid, once you clicked on the "Create Paper Vault" page, you could immediately disconnect your ethernet or wifi. You could even save the page, go offline, load the saved page and generate new keys. There really is no need for that, but if it makes you feel better then I guess it works
Furthermore, you don't have to send the whole contents of your Paper Wallet to your Active Wallet when you want to access your Bitcoins. You can choose exactly how much you want to send to the Active Wallet. I hope I addressed that concern, I had to contact one of our programmers to double-check that my reasoning was correct.