Noob here with a noob question. I bought 9 BTC on Mt Gox just as I was picking up on Gox' security problems. I moved the BTC to my wallet. The status is "unconfirmed" and I went back to Mt Gox and changed my password there. Am I safe?

1. The BTC are *mine,* right, even if the transfer is not yet confirmed?
2. Once they are confirmed in my wallet, no one can get at them, right? (unless my computer is hacked in a more general way...I mean, the wallet is secure, right?)

thanks for your help