A problem with openAlias could be a DNS attack ending in someone diverting your alias to another address fixable with DNSSEC
Discussion
And a good practice in general if you are too paranoid, and particularly on the addresses one have exposed to the public:
1. Use subaddresses, the ones starting with 8
2. Transfer first to another subaddress you control