yes, you don't have give out private key or json file to everyone, but your computer already infected virus and wallet already compromised, online wallet not secure unless you make sure computer is 100% clean, remember cryptocurrency can’t hack and mew online wallet just a gui let you easy to manage your assets, but don’t store any personal information