And your session cookie..
"If so, this change amounts to not protecting user privacy as much as insisting that only the NYT can monetize their users' privacy."
The cookie is now hidden from the MITM. Before, not only could they see what pages you see, but they could login as you.