HTTPS only via a CA (instead of self signing) is even worse for site of questional legality. Then it allows a centralized entity information and control of who can access your site. Yes, you can get a new TLS CA to sign your certs if one gets pressured to kick you out, but that just means the next will too.