Is this really secure?

Yes, the system has been carefully designed and data from your private site should not leak unless someone can steal your password and/or access Wikidot.com as someone who has sufficient permissions.

The system is much better with the SSL encryption. It's available for Pro+ Accounts.