[htgb]

That's not entirely true though: plaintext doesn't only allow snooping but also man-in-the-middle attacks such as injecting malicious code or ads.