Nobody said the downsides were over HTTP. When talking about state sponsored espionage, the glaring downside of HTTPS is PKI and buying into the CA model.