There's a pretty significant difference between "no HTTPS" and "mandatory decryption for consumer electronic devices with a warrant", even if the latter is still a bad policy.