True. Many people appear to use http://brainwallet.org or similar sites though; they don't really understand what hashing functions are, so they trust these sites to securely generate a private key.

Someone should really make an alternative with bcrypt or scrypt.