Warnings on unencrypted HTTP were only feasible after free certificates were widely available. BIMI doesn't have that so yes it's a racket.