I don't see what has taken the HTTPS implementation so long, and why is it user opt in? Most of the user base doesn't even know you can have privacy settings le

I don't see what has taken the HTTPS implementation so long, and why is it user opt in? Most of the user base doesn't even know you can have privacy settings let alone what the benefits of a HTTPS connection actually are. Can anyone answer me how it is safe to have the advertising accounts which require credit card information to make payments, not be HTTPS like they are currently? How has there not been a serious breach with all the kiddies running around with fire sheep and the like? Fuck the social captcha, how about Facebook nationalizes the best non obtrusive apps (I don't know of any, but maybe there are some) and eliminates third party shit from the site entirely. Third party crap apps will destroy the site if not kept in check.