The service doesn’t employ TLS/SSL encryption to secure the traffic between your browser and the website you’re visiting. As a result the data transmitted may be monitored by unauthorized third parties.
I agree with the proposal, although the weight may be too high in my opinion.
For the description, I think it should be longer to explain what https exactly means:
The service doesn't employ TLS/SSL encryption to secure the traffic between your browser and the website you're visiting. As a result the data transmitted may be monitored by unauthorized third parties.
Though I think the weight is justified since SSL encryption is a standard these days and there is no excuse to not support it.
The only time I am aware of missing SSL encryption is some government sites as they deem the cost-usage factor too high, which justifies the weight too.