Comment by BobbyTables2

Insecure only if HTTP instead of HTTPS.

The format being text, html, video, or an executable program has nothing to do with it.