Do I take it that if there's this Trojan about that nicks your bitcoins inside wallet.dat files then you'd actually be better off just not getting a wallet? Or is that less secure. Probably a stupid question.
Question: A Paid service? Hehe...?
Basically, by keeping your wallet on a remote server, if someone hacks your home computer, they never get a copy of it, so they can't spend your Bitcoins. Even if that person installs a virus, trojan, or keylogger on your home computer and steals your password to our site, unless they steal your cellphone too, they can't spend your coins because our service will send you a text message with a 4 digit code every time you try to spend coins.
If done properly, it should be more secure than keeping an unencrypted wallet on your home computer.