The site in general is secure, but some embedded pictures are not.
Yep, that has always been a problem. Depending on browser and settings, embeds to external sources can do that no matter how secure the primary site is. I have to deal with it on mine all the time. I am about to block certain site embeds because they are indeed serious hidden security issues for member’s browsers.