It is secure, but kureyon is right about number of possible attack vectors. Now instead of someone targeting - your device - the connection between your device and the tower - your service provider - the connection between the tower and the Google server - Google