> Plaintext HTTP gives no illusion that your connection has confidentially, authentication nor integrity.

Without an explicit warning, it's not going to be at all obvious to the average user - or anyone who forgets to check the address bar/isn't enforcing HTTPS - that the connection lacks those properties.