A static site? Because any hop can inject arbitrary code which your browser will then execute.

TLS doesn’t just offer confidentiality, it also offers integrity.