It's probably reasonable to use HSTS to force https-aware browsers to upgrade and avoid injection of all the things she hates. Dumb browsers like `netcat` are not harmed by this at all. But even then ... why aren't you using `curl` or something?
There's a broad spectrum between a browser that is "aware" of https and a browser that has all the cipher suites, certificates, etc to load a given page.
Unless I'm at work where there's compliance checkboxes to disallow old SSL versions I'll take whatever you have.
At least if you use HTTP it is blatantly insecure.