Because https is still included. It needs to be, so that users know it's a secure connection. This makes https URLs appear more crufty than http URLs. This, in turn, can be used as an excuse to be insecure.

The fewer such excuses there are, the better.