It's not an idle fear. Before https there were ISPs that would literally insert ads and other javascript into returned pages. Beyond security itself, that kind of thing can break the content.
There was also content filtering. Imagine your home internet being scanned and filtered like some locked down corporate network. Ewh.