I am seriously thinking that they might be safer there than over here. Think about how these keys could get leaked via cross site scripting attacks here. If that happens anything liquid you have is gone. Over there, arguably they could steal your funds. Okay, yeah. I need to use the second factor before login in and before withdrawal.

It is not clear cut which is the lesser of two evils. I use my posting key to log in and just when working with the wallet do I use my active key.