I'd argue it's worse than no SSL, at least then I have a signal from my browser that I shouldn't be submitting sensitive information.
Of course they would, soon after they would start getting questions about that red lock next to their domain name. CloudFlare is here preventing browsers to do the right thing.