The security shortfall isn't minor. In Chrome (other browsers don't distinguish the severity), a crossed-out HTTPS means that a MITM attacker has the ability to

The security shortfall isn't minor. In Chrome (other browsers don't distinguish the severity), a crossed-out HTTPS means that a MITM attacker has the ability to run arbitrary javascript on the page. It doesn't even bother running severe mixed content now, though.