[JoshTriplett]

It's not an argument against HTTPS.

If you use HTTPS, you know you're talking to the site you think you're talking to. If that site itself is sharing data in a way you don't want, including by pulling in third-party scripts, you have a problem with the site. That's not an argument against HTTPS; communicating in cleartext doesn't solve that problem, it just means that other people the site doesn't trust can also access that data.

Let's not let the perfect be the enemy of the good here. Universal HTTPS is an improvement.