Main problem still is Google: They consider HTTPS and HTTP links the same. When switching a site to HTTPS you lose all your incoming links. Redirects only transfer a small amount of juice. You're toast.

We tried migrating several times to HTTPS only, every time got a huge penalty from Google.

So Google is the main driver for HTTP websites.