HTTPS is a lower bound of reasonable security, not an upper one. The argument for HTTPS _everywhere_ is that it's the smallest possible thing you can do to make yourself slightly secure.
Would you find it ironic that someone selling combination locks for gym lockers wants a better lock on their storefront?
Would you find it ironic that someone selling combination locks for gym lockers wants a better lock on their storefront?