Someone in the middle could teach you a variant of the material in hopes of creating more insecure servers out there. Or perhaps link to an "official companion app|pdf|exe" on the page.
Or more likely: insert a cryptocoin miner script or ads.
So that your ISP, or someone else along the way, doesn't put a cryptocurrency miner into the page source.
Using HTTP leaves you open to being mitm'd, for one.