It's just a protocol used to transmit traffic. Security is far more involved than the reliance on any one thing. The site is http because technically it doesn't need to be https.
Unfortunately due to the Google monopoly they perpetuated this nonsense that just because a site is using https that the site is "secure" so here we are.

You should be far more worried that you are running as a standard user, software is patched and you only have the software installed that you require, checked all the certs installed on your systems are valid and not compromised in all software (mainly OS and browsers, good luck!), AV and EDR solution installed and adblocker and script blocking used on all devices.....and of course not trusting any websites even if they are https.