Well he's not wrong. traffic is far more than perfectly configured TLS.

DNS, SNI and mixed content are all insecure for the vast majority of users. You can learn a lot from HTTPS traffic.