This really needs to be fixed. Offering hosting that is not capable of SSL or https is beginning to be pointless. Sonic will have to adapt to the change. That unfortunately includes empowering its customers to get SSL certificates. Fortunately, with Let's Encrypt that is free, nearly painless, and easy to automate.
Do I like this? No, not at all. Personally, I feel that the push to stamp out all unsecured http is silly: Folks who serve static web pages to the public with non-controversial content (like baby pictures intended for grandma and uncles to look at) really don't need the extra security that is provided by https, since all their content is out in public anyway, and the risk of MiM-attacks is de-facto non existing. Alas, the web community has decided that everyone has to use https, and is shaming folks who don't, so this needs to get done.
A related quest is updating the member tools for DNS updates to allow automating (scripting) updates of DNS text records, for those people who have their DNS with Sonic, and need to use Let's Encrypt DNS challenges for certificate renewal.