I’ll accept the risk and not live in fear.

It's not an idle fear. Before https there were ISPs that would literally insert ads and other javascript into returned pages. Beyond security itself, that kind of thing can break the content.

There was also content filtering. Imagine your home internet being scanned and filtered like some locked down corporate network. Ewh.

> It's not an idle fear. Before https there were ISPs that would literally insert ads and other javascript into returned pages.

In some countries known for lacking consumer rights.

Sadly, that's most countries. (or at least, most people live in such a country)

To be fair, a lot of those consumer rights had to be realized and invented first - after the corporations went too far. Think GDPR and co, if companies weren't so thirsty for danger and loading webpages full of trackers, it would never have (needed to) be made.

(France) When I was a kid, 40 years ago, we had a good consumer protection. The warranty period was 1 year.

Now we have the same good protections, the warranty period is 2 years.

So some countries had it for a very long time, it is rather a matter of culture I believe.

In some countries (Australia for example), the horse came _before_ the cart.

This is also what CloudFlare is doing, is it not?

What possible reason could one have to avoid HTTPS whenever possible? I really do not understand this mindset.

Being brave is cool and all but it's a weird adage; I'm not afraid of malware or ads, but I'd still prefer to not get them.

It's an anti-vaxxer statement too; I'm not afraid of the 'rona either, but I'd rather not get it if it's all the same to you.