Disable insecure HTTP support in safer security levels
Insecure HTTP makes it possible for exit nodes to steal anything sent to/from insecure website.
Unfortunately, many websites still don't support HTTPS, so it is not an option for standard security level.
However, on "Safer" and/or "Safest" security levels we can disable HTTP support using HTTPS Everywhere force upgrade option.