"it does, however, mean bad security practices"
No it doesn't. Seems you have swallowed a whole bunch of Google crap.
Had another phone call from web host yesterday wanting to sell me some SSL cert. Whining about lack of said site would cause it to be downgraded by Google search. Being as the site has no user login, no user commenting, no sales cart, and is linked to by Washington State University, University of Texas, University of North Carolina, Oxford University, National Academy of Science SF, National Academy of Science Mexico City, British Parliament, University College London, Natural History Museum London, Natural History Museum Venice, etc, etc, it is most likely not going to be downgraded unless Google want to degrade their search.
Biting the hand that feeds IT
