If you serve insecurely, that means allowing downgrade attacks and malware injection for clients who are trying to do the right thing.

At least if you use HTTP it is blatantly insecure.