I figured that everything the tools are reporting is publicly available on the blockchain, so adding a security certificate was not worth the time and money (about $300). It does mean that theoretically others could see what people are using it for, but I think this would be of little concern to most people, and you'd have to be pretty determined hacker to even do that.

I would certainly install a certificate if users were being asked to log in though.