Browser makers must not agree with you, because self-signed certificates get huge warnings, but HTTP connections get at most a little "Not Secure" notice in the address bar.