Probably what annoys me most about this is that HTTPS was already there (I've been using it for a good month or two). This would imply that the costs were already spent, the infrastructure was in place and it was working just fine.