There are no doubt merits to SSL or secured server configuration. A friend recently shared this article from the Electronic Frontier Foundation on the rush in government to embrace encrypted hosting -- https://www.eff.org/...es-switch-https.
While I encourage everyone to read the article, let me underscore a major factor ... secured server is only as good as strong passwords. To this day, weak passwords continue to be the weak link to online security.
I am part of the Cyber Attack and Internet of Things Task Force in Washington, and what I've heard over and over by the pioneers and leaders in the digital world is that security is all about strong passwords. Encryption and secured servers mean nothing without strong passwords.