I really hope that they make sure and point this out in bold font in all the docs.

Right now I don't see a mention of it anywhere and if people start to use this without SSL on their checkout page, there's going to be big trouble.