I clicked on the bitcoin sign on the pie chart website.
He auto started my multibit asking if he needed to put the payment info on it.
Could this have infected my multibit and thus having my keys stolen ?

Or is this a legit feature?

https://bitcoinwidget.appspot.com/