I could be mistaken, but I think it has to do with the way they use tor to access the umbrel panel. It’s been a while since I’ve looked it up, but I agree that’s a glaring omission.
Yes and they know it is why they say they are to set https any day now.