We're not accepting any extremely sensitive/confidential credentials directly on the site therefore there's no need for it. If worried about logging in on a public network there's many VPN apps. Otherwise we would've gone the LetsEncrypt/Certbot route long ago.