Just when was the last time you typed the "https://" at the address bar of your browser (accessing a site that isn't yours)?

People just don't think this way. Well informed people (a small minority) will check the padlock after the site loads. Most people will use an HTTP site thinking it's secure.