I see random websites that aren't open source saying they are "encrypted, safe", when they obviously aren't! Come on!
The burden of proof is on the claimant. In this case, the claim is that they are neither encrypted nor secure. The claim can be made from both sides but if neither provides proof then we're all just tinfoil hats.