Because it's an appliance that isn't intended to be managed over insecure networks, and HTTPS is a train wreck of certificate and naming issues. For example, consider that Google Chrome will mercilessly pester you about not trusting a self-signed certificate, and will require you to periodically reconnect at an annoying frequency.