I thought the point of the article was that even if they didn't do anything to your content, they could still be collecting quite a bit of your information if everything you did was over HTTP and not HTTPS.