There are no big incentives. Their large customers largely don't care or understand these issues. The few tech sites bugging them about https support aren't a critical mass.