I think this is a good move. Turning https on is a case of sensible defaults. Users generally won't think about data security and others being able to intercept

I think this is a good move. Turning https on is a case of sensible defaults. Users generally won't think about data security and others being able to intercept their HTTP traffic. I do wonder if there are any numbers comparing performance with http with https. Should be too hard to measure.