Online wallets are quite risky and there is always a chance that the coins can be stolen by the thieves. But if you use 2FA, then the risk can be reduced by 99.99% (if not 100%). Also, always use gmail along with your online wallet. Gmail always check for new IPs and it will ask for additional verification if it finds suspicious activity with the wallet.
I have heard about 2FA but have not tried yet, bnaj can share its experience using it and help me understand how it works