Thankfully browsers are "forcing" sites to migrate to HTTPS.
As of Chrome 56, HTTP sites with login forms display a gray "Not secure" label. They will soon make it red.
Likewise, Firefox 51 added alerts for HTTP sites, and not only will other browsers follow, they all plan to escalate the alert visibility.