Genuinely curious — how is this a problem since the iso is served over https?