Keystore / JSON file and import wallet from MEW to metamask is the most secure way to log in so far. All my assets are safe and I am satisfied with this method. Privatekey is too dangerous and hackers can occupy it at any time. So, I never even backup privatekey.