There has not been any official proof that a security hole in Gmail is still the weak link here. The proof of concept I saw about how one would inject filters into Gmail after they patched up the previous security hole was pretty flimsy.