Not only allow, but forcefully redirect their search input up into the address bar. In my opinion this has been a deliberate and concerted effort by google to get everyone to 'search' instead of go directly to sites and this ux behaviour has been bothering me for a very long time now. I am not at all surprised people are searching for https after all this time. That being said, there is likely a large number of urls pasted into the search box vs the address bar. (Hardly anyone can tell the difference anymore.)