I believe the hackers are working on a way to decrypt the wallet file using trojans/malware...
RULE: if YOU can access it, then THEY can access it.
Yes but it is an order of magnitude more safe. If you download the wrong javascript app or addon they might be able to get your wallet now.
RULE: if YOU can access it, then THEY can access it. Unless it is on a usb drive.