Lots of excuses and dodges reminiscent of antimasking. And more effort put into justifications than a solution to be done with it.
Privacy, integrity (bit flips), and JS injection risks are just some of the reasons to deliver all sites by HTTPS. I hope HTTP is deprecated at some point.