Nothing is 100% secure and you're only as strong as your weakest link. I used to hang around privacy and security groups and they used to recommend BW was enough for most people. If you're high risk then something offline (pen and paper!) more suitable. I'm not high risk and I don't store my HW wallet keys there. I have security backups saved offline for important sites too. There's always a risk of course.