I suggest you to have your fund in the paper wallet or hardware wallet. If you do not want to buy the trezor or ledger nano still you can keep your fund on the desktop wallets but you have to keep your private key not shared to anyone of the people.
You should have 2FA authentication to keep your wallet secured. Still you are using the online wallet you are in risk and you have to keep logging into the wallet with the correct URL to avoid the individual hack attempt.