In practical terms it doesn't matter, which is probably why HN doesn't seem to care. But in my opinion, it's free and easy to get an ssl cert and so from a norms perspective it should be viewed as non-negotiable today. It doesn't actually add much to the website but it's best practice, like changing the default password on a raspberry pi even if you never plan to network it.