Linux is a hobby project maintained by hippies. They never cared about privacy. They don't even care about using https repo links. All repo links are http, you need to "fix" it yourself or anyone can see what packages you are installing and updating.