So google is pushing you to improve your security by doing this. Good, good :)
There is a HTTPS wrapper around HN, but it has been pretty flakey lately (lots of timeouts): https://quickhn.appspot.com/news
I do agree that if you don't have user logins there is no real threat. The only possible 'attack' then would be an ISP injecting ads or injecting other content that you didn't write :)