I can't quite decide whether hiding the stupid with SSL would be a good thing or not. If done properly (incl. pinned cert(s)), it would mostly hide the stupid,

I can't quite decide whether hiding the stupid with SSL would be a good thing or not. If done properly (incl. pinned cert(s)), it would mostly hide the stupid, which would help protect users - but also make it less likely that users would ever know just how bad the app is.