The problem is that http does not automatically redirect to https. There is no reason not to. It has been discussed at at least one Council meeting but nothing came out of it AFAIK.