you pretty much know it, seems like your educated guessing was getting it right every time
do yourself a favour man and don't use a hosted wallet, well not for for more than 50% of your funds anyway or something like that
For sure this will just be a hot wallet for transactions. I am just getting to the game. As I acquire more for long term holding I will be putting it into paper wallets.
But, realistically, what is the risk of having the encrypted wallet store online at blockinfo vs on my PC? Assume someone gets access to blockchain.info and d/l's the encrypted wallets. Since they don't store the passwords, it is up to the attacker to brute force break the encryption. By that time I hope that blockchain would inform everyone of the incursion and I would have time to quickly transfer to a paper wallet ready and waiting, create a new wallet somewhere and import the paper wallet into it. (Yes I'm sure this has been discussed here alot). So, no need to answer in this thread.