Connecting Metamask is like a second layer for MEW, preventing yourself from entering wrong site. Keystore is said to be safer than private key, but it still depends. If your keystore file is stolen, one would still need a password before decrypting your public key. If your private key revealed to other, they can use it however they like. It would be better to use keystore for daily use and private key when keystore files went missing.