Anyway, your example is a good one as to why it's weird for Chrome to label these things as insecure.
So a bank using plaintext HTTP doesn't qualify an insecure?