This site doesn't use encryption, even for the sign in. My password manager complains bitterly about it.

I've gone to total encryption for the sites I manage. One hosting company I use (canadianwebhosting) offers them for free (I think it's actually cpanel that sets it up). You can also get free certificates from Let's Encrypt.