blockchain.info wallet is secure
but you must choose a very hard password (and only used for your wallet) and you have to change it frequently
also you must use anti keylogger
and of course use 2 factor authentication
and make sure that the connection is sercured with certifecated HTTPS connection
Best,
You're definitely wrong here. Blockchain.info should not in fact be called a safe wallet at all. There were various incidents which resulted in users losing a great sum of money several times due to their negligence.
A hard password would not help at all if they decides to change the code such that it captures your password. This can effectively allow them to steal all the funds from the private keys on their server.
2 factor authentication allows the wallet to be downloaded only when the key is correct. Someone could in theory intercept your wallet when you key in correctly and this wouldn't help at all if there is an inside job or poor RNG.
A common misconception is that HTTPS connections means that it is secure. This is definitely untrue. People were using HTTPS on tor and their wallet still got hacked, it would be more secure if its an onion website. 0-day exploits are also possible with HTTPS, for example, the recent heartbleed which was discovered way long before majority of the sites started patching and people's information might have been stolen long ago.