Though https still has the privacy advantage, if I update over http, my ISP knows I downloaded the tor package, this information won't be leaked over https. and

Though https still has the privacy advantage, if I update over http, my ISP knows I downloaded the tor package, this information won't be leaked over https. and since it's minimal trouble to set up https, I think it's fine