Encryption isn't just about hiding information, it's also about ensuring that nobody tampered with it.

Hacked routers can easily insert malware (and now days crypotminers) into html/javascript/css payloads, hell I remember playing with some stuff decades ago that would allow you to inject malware into exes that came across the network without encryption.