Hi,
For the same reasons that you made this post, I just created a small program that generates bitcoin addresses and saves the keypair as an encrypted wallet file. It's basically a tool for the overly paranoid, since it doesn't create any unencrypted intermediate files and doesn't require the full bitcoin client just to generate an address. It also generates just 1 address, so it's impossible for somebody to steal your keys from an "old backup".
https://github.com/vegard/mkbtcaddrDisclaimer: There is no warranty, etc., and I am not responsible if something goes wrong, etc.
I've tested it myself and it worked for me, but please scrutinise the source code before using it.
Vegard