One thing that these types of articles always miss is that HTTPs isn't just there to protect user data being submitted to your website. It's also there to make sure that the data you're looking at wasn't modified by a 3rd party without your consent.

The fact that someone technical has missed it this is a really good argument for redirecting users from HTTP to HTTPS.