Wow, this is incredibly stupid: conflating http and https with minor errors.  It should show half a lock icon and half of a page icon, diagonally-split to indicate mixed&#x2F;unsecured content.  Globbing the two together creates false comfort and hides problems.