Who guarantees the security of private keys when stored off the Steem blockchain? That's likes saying, trust me with the keys to your bitcoin wallet.

Centralised storage is asking for trust in these services that they will not be abused. This cannot be guaranteed, by the service provider. It also makes it a target for hacking.