It doesn't say HTTP is spyware; it says it has some problems (which is true). There are ways to be implemented to mitigate some of these problems.