[JimDabell]

Even if you don't have :80 open, that doesn't mean there isn't a MITM that would accept the connection instead of you.

[willstrafach]

As long as https:// prefix is used, this is not true, MITM cannot downgrade that.

[beaconstudios]

plus a HSTS header for any type-in traffic.