People keep on bringing this up, they expect some kind of security when entering personal details.
Even worse, from July 2018 Chrome will mark non-HTTPS sites as "Not secure".
Let's Encrypt provides free SSL certificates and has a zero-administration method to update them.
There is really no reason any more to not provide a secure connection on places where people expect them, specially not when you are in the donations season.
Edwin