New web features are https-only by default, since a few years ago. So if your site uses any recent APIs, dropping encryption is not an option.

Secure context is only required for features that are somehow privacy- or security-sensitive. Some notable features are on the list, but you can absolutely have a modern site that doesn't rely on any of these.

Securing your communications is required to mitigate against main in the middle attacks.