Most sites aren't https, so the connection isn't encrypted and therefore insecure. If you click on the circled i, it should tell you that. But if you are engaged in e-commerce, ie, putting in your credit card, the page should support https, and preferably mask your entries. In the case of PP, the connection becomes HTTPS as soon as you enter the checkout screen.