There really is value in setting up proper SSL for this site, especially since it can be done at no (financial) cost using Let's Encrypt. Or perhaps Pair would be willing to do a sort of "pro bono" cert?