>It should be assumed that any step that requires manual intervention will be skipped by most people. Indeed. 1. If you don't care about security, it still do

>It should be assumed that any step that requires manual intervention will be skipped by most people. Indeed. 1. If you don't care about security, it still doesn't hurt to have HTTPS. Think of it as "extra" that you get for free. 2. If you care about security, you might still don't have the know-how to make sure everything is secure and don't have time to get into it as you're trying to get things done. 3. Even if you care about security AND have the know-how, you might still forget. Nobody's perfect. So it's good that the HTTPS is there.