This is because most people are browsing and not buying, so the caching advantages of unsecured catalogue pages is likely quite large.
At least for most of those the login is a separate protected page rather than a https iframe.
At least for most of those the login is a separate protected page rather than a https iframe.
There are still parts of the world where caching proxies are used to conserve limited transit bandwidth; CDNs don't solve that.
Only if you're taking about a browser cache. Any other cache couldn't intercept the data and cache it without alerting the browser (unless you mess around with installing SSL certs).