The fact that it's http is actually good, one can set up a local http copy, removing the need for internet access at all. (I have no plan/desire to allow IoT devices internet access unless 100% whitelisted/filtered).