As you note, the redirect breaks all benefits of HTTPS. That can just be trivially stripped.

Powershell, in any case, allows for scripts to be signed. Since the script in question is semi-auto-generated in any case, they should just include that as a step in the build. But serving unsigned scripts over HTTP is just beyond the pale.