well, at least, the answer given is encrypted in transit, so a potential MITM attacker won't know if I need web3 or not.

hurray for https everywhere... or else it is [big red warning] insecure.