With Keychain your private keys are used on your computer to sign the transactions that you broadcast on the blockchain. With SteemConnect you grant your posting authorities to allow it to broadcast operations on your behalf. Also transactions that require an active key must be signed manually on the steemconnect website.

Both methods can be considered secure, it mostly depends on how you want to store your keys and on which device you want to use them.