You make a pretty good point, but not just gmail. Pretty much all -mail providers use https when users access their web interface.