This is a common misconception. Https also prevents bad actors from injecting content into the page.