Yes, non-Web clients are safer. Automated services should always use Bitcoin-Qt, but for casual use I like Electrum.
Blockchain.info is safe if you backup your wallet
Only if you use the browser plugin. Otherwise blockchain.info can change its JavaScript at any time to steal your wallet.