HTTPS sites have security certificates, normally meaning they can take payment securely. You would never order off a site without https. The fact it says "not secure" for http actually makes the site feel insecure when this isn't the case at all, it's warning you that you must not enter payment details on such a site.