I have read this whole thread with great interest. I am a brainwallet user. In a thread from over a year ago, I learned a lot about the difference between obfuscation and sufficient entropy. Have a look...
https://bitcointalk.org/index.php?topic=350789.0In the end, I decided to stay away from obfuscation. I now use a truly random, very high entropy passphrase. I couple that with a second random and high entropy BIP38 passphrase. My coin are extremely safe.