EV SSL can be had for around $300 a year, there's an entire freaking industry that exists around card processing so you don't have to fuss around with PCI nonsense, and I've actually never seen a "trust seal" on a site that wasn't already shady at some point.

That said, .secure seems like a poor solution in search of a problem.