I know we all get paranoid at times, but would you trust an "in-box" computer with creating your private keys? 


This seems to be the minimal amount of trust required.  Unless you happen to have an untampered pc from before BTC was conceived in 2008.