I hold the controversial opinion that encryption can be an anti-feature on the "small web". One of the reason is technical: encryption takes computing resources, and can hardly be made time proof, as it has to evolve in response to threats, and certificates tend to have expiration dates. The other is more philosophical: you use encryption when you want to share secrets: personal data, passwords, credit card numbers, etc... A system that doesn't support encryption doesn't support transfer of personal data, accounts or commercial transactions, which I believe is a good thing in this niche. There is no shortage of secure communication systems when you need one, let that niche stay a niche.
Your point about not having encryption is really quite interesting to me. I would want to add some form of signing to prove something came from somewhere unaltered, but that would go against the idea.