Web client = weakest option: the server that sends you this page could send malicious code. For real protection use the terminal or Android app. Use Tor Browser to hide your IP.