Comment by jackson_1

The indirect costs of switching to HTTPS (like lost advertisement revenue) make it a inviable solution

This doesn't entirely make sense. I'm sure it's possible to serve adverts on a HTTPS page, and let's encrypt is hardly expensive