There is a difference in it being "virtually" no difference, and there being no difference. Allowing a third part to handle TLS for you (as cloudfront/cloudflar

There is a difference in it being "virtually" no difference, and there being no difference. Allowing a third part to handle TLS for you (as cloudfront/cloudflare and other providers often do) is undermining the point of encryption. For a static site that little difference but encryption herd immunity is still compromised. Proper encryption is not just for important stuff, it's for everything, so that when we send important stuff it is not seen.