But I think you shouldn't have to worry about it. Without the wallet ID nobody can hack your account. And if you set a protection, everytime you want to login on your wallet, a mail with a code will be send to your email. So, just keep your email safe and your wallet ID protected.
Bullshit. Don't use any online wallet ever. When are people going to learn this? Does it really take a theft of everything in your wallet to realize they're the crappies, least secure wallets ever? Seriously. Google it. Don't take my word for it. Blockchain.info is terrible for bitcoin losses and they blame their customers. What kind of idiot would trust their money with a company like that?
"Your credit card got stolen you say? Well that sucks. I would suggest you get a new antivirus software and start collecting up some money to pay us back."
"Um what the fuck? It's your incompetence that made me lose my money. Your shitty service has lost people thousands of dollars. Because it's your fault I expect you to pay me back."
"Nope. Eat shit and die. Bye" (paraphrasing of course)
Would you stay with that credit card company? Obviously not. But people accept it with blockchaon.info like they're the 'official bitcoin wallet'. Even the title of this thread. There is not a password on the Blockchain. You are talking about a website that may as well be imastealyourshit.com. They have nothing to do with the Blockchain. You got fooled. If you haven't been robbed blind yet then get the hell out of there!!
It's not 100% safe as nothing about Bitcoin is 100% safe. If you have a desktop wallet, your computer can be infected by a virus and your BTCs will be stolen. If your computer crash, it's all over. There are some steps to make it safest, it's true, but not 100% anyway.
Some people aren't interested doing many steps to storage BTCs, they just want to use an easy and online service like BlockChain.info. They don't have much money to store, they won't miss it very much if a hacker steal accounts or any other thing. And it's a very useful service indeed, I'm using it since almost 1 year and never had any problem with them.
I'm just telling him about his actual situation. But if OP wants a safest way to storage BTCs, he can follow what you are saying of course.