@Gargron@mastodon.social imho it's a good step, as there still are plenty of websites and systems that do not use https.

You might change it in a config but you 've already known this.