If I was the bad actor I would simply purchase google ads in the name of the target business sending traffic to my own site with wonderful green padlock - it's cheaper and has bigger reach than trying to hijack TCP/IP traffic.
More to the point - if I am running a collection of Karl Marx works it is highly unlikely that he would request payments.
You're describing a completely different attack vector, which is the entire point - to push attackers to different attacks. if we eliminate HTTP, we can focus more effort on the attacks you're describing.
Regardless of the content, hijacking is a danger to users.
I don't really understand your point. You're upset because I am advocating for your users despite not being one? I... don't care at all.
It isn't my business so I've done nothing to reach out to your users or interfere in your website. We're having a discussion about technology on a technical forum.
It is the browser developers' business though since they are tasked with protecting users from these specific threats.
More to the point - if I am running a collection of Karl Marx works it is highly unlikely that he would request payments.