I've always just run the BitShares interface locally instead of pulling it from someone else's server on demand. I'd recommend at least doing that if you're working with enough value to be worth it.

Ideally we should separate the interface from the key storage and signing application, similar to MetaMask or an offline password management application.