Because there are internet providers out in the wild that can and will insert some garbage into any unencrypted HTML page, including ads or phishing.