When it comes to erc20 tokens, I have always trusted myethwallet though there has been some stories about it in the past but I have learnt to use it with metamask to improve the security
No matter how secured it is but still there is a way to be hack, its all about how we handle or manage our wallet accounts.
MyEtherwallet is so familiar to us and mostly people were using, using offline wallets is a good option also but all the security is in our hand. Keep it in the right way.