As I said above: <i>Sure, this isn&#x27;t super-secure for first time visitors to their banking website</i>.  But it&#x27;s fine for the common case where someone tries to MITM you when you move from your home to a coffee shop or vice versa and you&#x27;re just browsing sites that would otherwise be using http.