> (Google also added .dev to the HSTS preload list so browsers expect names in that domain to only be reachable via HTTPS, thus breaking in-house uses of .dev.)

Anyone using .dev for that was already broken per the spec. There are TLDs for those cases, they are .test, .local and .invalid.