Yes, it does. An MITM attacker can deliver malicious code to you which runs in the website context, and can exploit any bugs in your browser's javascript engine.
Your ISP (or your router) can easily add their own JavaScript/HTML/ads on websites using http, it's likely that you are using a decent ISP that doesn't but is better if it's not even possible.
Public wifis are still a thing, many of them not well secured against Mitm attacks. Also compromised routers. So even if you trust your ISP (and their IT security and supply chain) there are still good reasons to want HTTPS everywhere
How hard is it, now that we have had free certs via letsencrypt and the certbot tool to automate vhost configuration to have encrypted and signed data transfer?
I think you should re-evaluate how you speak to people online, it is unnecesarily hostile and I guarantee you wouldn't speak to me this way in real life.