YouTube defaults to HTTP as well. The security threat is pretty minimal, but an evil captive portal could sneakily grab your signed-in Google email if they want

YouTube defaults to HTTP as well. The security threat is pretty minimal, but an evil captive portal could sneakily grab your signed-in Google email if they wanted to.