This is correct.
Don't do your banking on PA.
But seriously, I haven't bothered to upgrade to https...nothing is bought or sold on this website, so there are no financial transactions going back and forth, so no real need (that I see) to employ https, other than to get browsers like Chrome to stop saying "Not secure" on the far left of the address bar.
If you're really worried, make sure you use a user name and password you don't use anywhere else.
PS. upgrading to https does NOT prevent hackers from hacking into a site and stealing data from a database. The only thing it does is encrypt data going back and forth from this website to your PC. The only thing of any slight significance going back and forth between PA and your PC is your user name and password (and maybe your email address if you are using the "forgot password" link).
@
