The system is probably secure enough for a game, but not for real money. Passwords are not encrypted, and anyone who can intercept email sent to your address, or who can gain access to the server's file system, can get your password. I plan to offer before too long an option to encrypt passwords for any traders who want it enough to accept that if they forget the password, it will be expensive to reset it.