We are currently writing up some detailed information on our security. The bitcoin wallet and database is on a different machine than the rest of the system, and is not connected to the internet. Therefore, an attacker would have to hack the webserver and then use that to hack into the wallet/database server. All passwords are hashed with bcrypt so even in the unlikely chance that an attacker compromised the database, your password would not be decrypted even if it was weak. We have multiple bank accounts, so if the bank closes the account we are using we will simply start using another one. There may be some delays in USD withdrawals during that time but banks are not allowed to just take your money; we will get it eventually. Currently we use dwolla for everything, so there is no bank account to close.
+1 just had to bump this...
