I build a lot of "small sites" and you're correct - implementing SSL for them on a typical shared host is not drop dead easy (also not free). I also host with

I build a lot of "small sites" and you're correct - implementing SSL for them on a typical shared host is not drop dead easy (also not free). I also host with WPEngine, a more progressive WordPress only host - which has made SSL implementation extremely simple. They're an example of a modern approach to web hosting. It's the low cost, shared (LAMP) hosting providers that need to implement it into their sales process and make switching existing non-encrypted sites smooth. Unfortunately, I don't see them moving to "free SSL for everyone!" anytime soon as it's a revenue generator for most.