I think people are right to be on a "hair trigger" w.r.t. vulnerabilities at wallet providers, given the atrocious track record of almost everyone involved in the bitcoin industry for security.
OTOH, Coinbase and Coinlab (the new Mt. Gox) are the entities I'd trust the most not to be outright fraudulent, since they're venture funded. The founders stand to gain far more by being honest than running off with BTC, and the reputation of investors (including YC) would be harmed far more by fraud, so the only real risk is outside compromise, employee compromise, etc.
Coinbase has done a better job on security than any other BTC entity I've seen (although I've looked at them more closely than all but a few other providers).