https://privacytests.org/
HTTPS Only can be enabled (it's still off by default) to score a few more points.
It gets better in Nightly and even more so in Nightly Private.