> so much for the green padlock icon telling us the page is secure.
Well, the page *is* secure. None else apart from British Airways and the operators of the VPN server in Romania, and their respective trusted partners and affiliates, had access to your data.