Is there HTTPS in general or at least for login process? Being on cafe style open wifi makes this a big issue IMO.

Yep, signup and login are done with HTTPS.

Good to know, I could not force it when I wrote my question but have since seen https flash by quickly during login.