From the very beginning of my activity in cryptocurrency I use MEW. Even when the site has moved to a new form I still use the old form of MEW.
it’s just the most reliable wallet at the moment. the only one thing
I don’t like is to connect my wallet to the metamask because I don’t trust to the metamaskSame to me. Once hackers stole all tokens from my MEW wallet. I'm 99% sure I didnt post my private key anywere, but I remember that I've connected via metamask "Bubbletone Blockchain in Telecom" site to receive bounty reward.
The bounty scams use the various tricky methods for 'rewarding' the bounty hunters. Probably they have a software that can extract the private key with reading the metamask data. Downloading the required softwares as a Erc20 token wallets is most commonly known fraud attempt by wise scammers.