Brian Lunduke inadvertently found an exception to this. He wanted to make his site accessible by very old browsers... So he stopped using https.

http://lunduke.com/

It's a dumb exception, but you guys might find it mildly amusing.

Agreed - this was a side project developed almost 2 years ago. as someone else mentioned - entire app subdomain is under https. Only the marketing page is http.

To be fair their entire app subdomain is under HTTPS just not their marketing site. But agreed on TLS-everything.