It is, several online wallets were affected by that as well. If i'am not mistaken it was done via "ssl downgrading" which is possible as the tor nodes act as a proxy and the person who controls the proxy can fiddle with your traffic. It is not per se insecure but you definitely need to keep your eyes open.