IMHO a kid should choose the punishment over the psychological injury of not stand up to bullies. The toll is simply too high. I know because I chose the other option as a kid.
Google makes money off search, which requires that users want to visit websites. All websites using HTTP are not secure. Unsecure websites are uninteresting to most users, but most users don't have the know-how to distinguish what sites are using HTTPS and which aren't. So the simplest solution is to get all websits to switch to HTTPS before it becomes a problem
Another possibility is Google is in an industry that makes money by collecting information about users, and by supporting universal HTTPS, they gained a competitive advantage over ISPs and others regarding user data for Google searches and other services.
Name Space Within States:
------------------------
"locality" - cities, counties, parishes, and townships. Subdomains
under the "locality" would be like CI.<city>.<state>.US,
CO.<county>.<state>.US, or businesses. For example:
Petville.Marvista.CA.US.
"CI" - This branch is used for city government agencies and is a
subdomain under the "locality" name (like Los Angeles). For example:
Fire-Dept.CI.Los-Angeles.CA.US.
So you'd be counting on the sub-registrar of jacksonville.fl.us not to allow a registration for the fraudulent "business" of Sheriff, Inc. -- multiplied by every municipality across the country.
Many top-level TLDs have requirements you need to fulfill, .edu is a good example. Similarly you need to prove you're a local entity for many country-specific TLDs. At the end of the day though, this attack vector will always be there, no matter how diligent you are about it. Phishing is all about numbers and one in is often all you need.
Last time I looked into trying to get pricing from ASCAP and BMI so I could legally stream some music for a small number of people, I found the following to be true:
1. There is no public pricing. (Why? Because fuck you, that's why!)
2. If I insisted, then the simplest way to get a price is to stream whatever I want and wait for a nasty letter from one or more lawyers that will most assuredly tell me how much I owe.
3. The only safe way to proceed is not to play the game at all.
That's gonna be a "no" on the cartels for me, boss. We might as well just throw all of the money and all of the copyrighted stuff into the memory hole for all the good they do.
See if the scheme that BMG / Columbia house still works. (Apparently they would send a check to the rightsholder, and if they cashed it, it was considered payment.)
Imagine all the data Cloudflare vacuums.