Security question: How can I keep my Bumbleberries secure!

I think the CryptoNote chains have some special needs in regards to key safety:
If I understand correctly the entire priv key is visible in
plain text in the simplewallet.log file??
How can I make save they are not stolen? Are there any other special vulnerabilities to take care of?
In general I think the safety measures that also apply to Bitcoin apply here:
- Keep only a small amount of BBR in unprotected every day devices (phone, PC). Lets call those "hot wallets".
- Dont download every crap to your device and run it, especially if its unreviewed and deals with crypto currencies!
- Keep your savings wallets (cold wallets) offline in a paper backup and encrypted with high security where you can easily get to them (TrueCrypt container on GoogleDrive, your webmail account or similar)!
- Make those cold wallets on an offline device (50$ laptop), that boots from a Linux Live CD and never goes online afterwards!
- All you need to save is your *.bin.keys file!
Anything else?