Agreed on all of the above (Also work in the industry). I would start by showing them the concerns of members here, and also that Google ranks https pages higher than non ssl pages, so they'll likely see an organic traffic boost in the long run. Short answer is they should get with the times, it's practically a standard now.

__________________
TC
Current stable:
- 2004 Mazda RALLYWANKEL
- 2007 Saturn sky redline
- 2004 Explorer...under surgery.

Past: 135i, GTI, 300E, 300SD, 300SD, Stealth