I think the concern over the online wallet is warranted. I would never be comfortable not having my private keys, so I moved my coins off into a paper wallet and some into a CLI hotwallet. The CLI wallet is available on github but they don't advertise the fact, presumably because it isn't user friendly enough for the target audience.

I'd really like to see an official desktop GUI wallet. Not sure if they are working on it, but right now that single point of failure is a little worrying, nothing is unbreakable and a serious hack there would probably kill the coin.