But if I paid someone to do it, I'd expect it to be done. Not every online shop also employs their own e-commerce developers, outside companies are often used.
If anyone suspects anything then contact the shop in question, voice your concerns, ask for an explanation, point out the problems. Easy enough to do really.
The other problem can be if the site uses frames. the address in your browser may well be HTTP:// and not be secure, but that is the address of the main frames page. The portion of the screen that has the checkout in may have an address of HTTPS:// and therefore be secure. If the screen comes up with the prompt of "this page contains both secure and insecure items, do you want to display both?" then this could well be the case.
Show me a decent ecommerce website that uses frames mate?
If your a good web designer you don't use frames, plane and simple.
Also if you built the site correctly you wouldn't have the secure/non secure item dialogue box appear as you ensure anything that was referenced in the secure area would be placed/duplicated within the secure area on the server.
There is no justification for getting this something like this wrong, no matter what argument people come up with.
As my old man always said, you do things two ways, either do it right or your doing it wrong
Also with the impending regulations regarding e-commerce trading, anyone not doing it correctly is heading for a lot of trouble!