Wow...I just went through this last week. Definitely didn't think they'd be dumb enough to encrypt the applet but not the chat traffic. But I was a little sketched out by the fact that you go through this entire official ordering process on their website through which you provide all your contact details, then some low-wage support guy in who-knows-where asks for your SSN. I refused to give it to him, which meant I had to put down a $100 deposit. On my credit card. Which I had to type into that unsecured chat box.
Maybe this is just a result of being in the military and having my SSN on 10 trillion documents in various insecure facilities around the world, but I would give out my SSN way before my CC number. Especially in a chat application.
Actually, you can change your SSN -- it's just very hard, requiring something like a risk of assault or proof of persistent misuse. Of course, even if approved, the discontinuity incurs many other inconveniences when seeking credit/employment/housing.
As they say, it's Comcastic!