Comment by infwhispers

You don’t need https for a web running locally; nothing goes into the network. Malicious browser extension can be real, but if that is true, you might have bigger problems than leaking the apple graph