You make good points, Tony. You're right, it's probably an inconvenience at most. I may still go and buy the tickets, but I also sent them a message about my concerns. It can't hurt to add HTTPS to the transaction, and hopefully they're storing their data correctly.

And don't worry, I use unique passwords on every site. I love Lastpass.