Nope, you can MITM the HTTP-only landing page so the link to the login page takes you to a page that looks just like the actual banks login page, but actually j

Nope, you can MITM the HTTP-only landing page so the link to the login page takes you to a page that looks just like the actual banks login page, but actually just submits your credentials to an attacker. Modifying the link would not be possible if the landing page were served over an encrypted connection.