Security theater

So what exactly is the point of running HTTP over SSL (HTTPS) on a fully fire-walled, nobody-cares-about-your-traffic, vanilla version control service? Because, right now, I think the whole point is to waste a day sweeping up after the fallout of replacing an expired cert and massaging the egos of all of the butthurt jackwagons who…