I'm aware of this issue too. Possible solutions I'm considering are...
If anyone else has a suggestion I'd love to hear it.
But BitAddress.org has been built in such a way that one can copy the .html file and run it from an offline computer.
That's true, but it can't make payments. So I think StrongCoin currently has the best balance between convenience and security.