Bitaddress.org could easily be compromised. 

Ask yourself:

How do you know the random number generator is truly random?
I would throw in a few manual changes to the private key it gives you.

How do you know the address are being correctly derived from the supposedly random private keys?
I would check the private key / address pair against other bitcoin software to make sure they match.

That's what I do at least.