The phone is for people who want hardware that can be used for hacking. We don't have any code that does anything related to tracking in the phone, and once it's released anyone can verify that.
That page is static, so I don't see how https is relevant.
Right now there is no security whatsoever. We are still getting the system to work, and work reliably. If enough people buy one we will probably add some sort of transport layer encryption.