It's always interesting to me that these plaintext sites are flagged as "insecure" and "risky" by modern browsers. I don't have a good solution, but it reminds me of [1]
They are insecure, because your ISP can change website responses and text format doesn't protect from that. So basically browser can't guarantee that you're looking at original web server response.