It’s defenitively not a scam. It does exactly ehat it should and is pretty good at it.

However, especially google is pushing it on everything, even when they are not needed. Punishing search results if they don’t enforce https, make it hard to access sites in chrome etc.

I have a static website that takes no user input whatsoever, thus https is pointless and a waste of compute power/energy.

In the end I see the biggest issue in not very tech literate useres thinking everything with https is legit and trustworrhy, while it really isn’t.