People who seek privacy in what they download would likely use a VPN. Supporting either would be a workaround that could address both types of needs. The needs of a single-user system don't always align with the needs of a corporate user with 2K desktops and 50K servers. It can also screw with local caching of repos and packages, at least for the most popular, current, current, tools deployed widely. There are times and places where HTTPS gets in the way and requires corporations to install a man-in-the-middle cert to ensure they can scan everything for MS-Windows viruses.