It really depends on what bunker you're using and who is in control of it. Arguably it is the most secure option since the client application never gets to touch your actual keys.