Nit: the site should be serving all of its assets over https.
This new https craze is like demanding seals of authenticity from posters on lamp posts.
To insert advertisements or "helpful" messages (https://tools.ietf.org/html/rfc6108)
I also don't necessarily think that we need https for everything, but it's better to err on the safe side and if you're gonna start doing it, then you should do it properly.