yeah but not secure is regular http. on https they cannot do that without triggering a browser warning.