1. Blue wallet is fine.
  2. No. Don't do the virtual machine thing. You need to use an offline machine. Even if the virtual machine has no network, you could have a virus in your host machine that is capturing screenshots of everything. Low probability, but I wouldn't risk it.