Yes that works!  I don't know why they don't just add https.  People have been asking a long time and they said they were going to update to it by now.  They have all kinds of excuses but it would be easy to do. 

 I could be mistaken, but I think it has to do with the way they use tor to access the umbrel panel. It’s been a while since I’ve looked it up, but I agree that’s a glaring omission. 

 Yes and they know it is why they say they are to set https any day now.