pitflyer: You are correct. Many of the images in the secure areas of the site are the same files used in the non-secure areas (such as the homepage). Their logic is probably that using the same images will make the site load more quickly. The non-secure images don't need to be "re-downloaded" in the secure areas of the site because they're already in the user's disk cache. The trade off is that PC versions of IE will give you a security prompt because the page contains items that are on both secure and non-secure servers. So maybe they weren't lazy so much as they chose one option over another, deciding that the drawback of the security prompt was worth the reduction in page loading time. Now, whether or not this was the right decision...

As Tolerian Wind noted, the upcoming PC versions of IE will address this issue. It will be able to tell whether or not non-secure content in a page (such as image files) will actually affect the security of secure data (such as user sumitted data). Current versions of Netscape on both Mac and PC platforms do this already, as does the current version of IE for the Macintosh, so you shouldn't get the "non-secure items" warning using those browsers.