b. For Ethereum and ETH tokens, a service like Metamask keeps your wallet encrypted in the browser, you can use it directly to send ETH or for tokens you can use it in tandem with MEW. It does not share private keys, only signed transactions.
[/quote]
You can use offline version of Myetherwallet too. It's very safe, but you need one offline computer and online computer.