Just a few years ago, that was prohibitively expensive, but the browsers are pushing everything to https only pretty hard now.

Most setups are nearly seamless for getting a free cert going now, but there'll always be a few old sites that no one will ever update