TLS isn't the only option, though. You could use TLS on setup to share a pre-computed secret between the device and the remote server, then bin the TLS connection. After that, encrypt and forward over HTTP.
Laziness isn't an excuse.
FYI, the mechanism you describe is (essentially) how TLS works...