Blockchain.info is safe. If you look at the source code, you can see how your wallet is decrypted client-side, which means there is no way for them to know your password be it encrypted or decrypted. The only e-mail I have gotten from them is the one with the identifier that you receive when you register, no spam at all. The rest of what it says is mostly so that they don't get arrested if the government decides to interfere with bitcoin.