'Safe' from the sense that it makes it difficult to compromise the security credentials of your account. However, this will do nothing to stop you from inadvertently uploading ransomware to your account.
Well of course it has no anti-malware features, the only protection it has is that no credentials are sent to the client, just an authorization token, which you can disable using your phone.