So using openledger's web wallet, I have imported my 1.0 keys and claimed my balances into my new account. My questions are:

1. Is using the webwallet a security risk? If so, why? (I have searched but info on this isn't easy to find)
2. My passphrase on my 1.0 wallet was good but not great. My 2.0 account has a much better passphrase. Since my 1.0 keys are now imported and the balances claimed, is my 1.0 passphrase irrelevant? Do I need to do anything to protect those keys or the balances in them that continue to vest?
3. Assuming I keep my passphrase safe, is it safe to store the wallet file in a cloud service?

Thanks for your help in advance!
D3adh3ad