I read this from fluffyponyza regarding safety of his site MyMonero.com:
There's simply no way I can control and guarantee the JavaScript delivery from the server to your computer, so you can be served poisoned JavaScript. Also, any local malware can and will steal your MyMonero private login key (we've seen evidence of this running in the wild).
Is it possible to avoid this risks of Javascript poisoning ?