Security has always been an issue with IoT devices. Off the shelf devices ... The normal ways to do HTTPS with an ESP8266 is to either use Fingerprints, or to use client.setInsecure().
Ever since the ESP8266 WiFi-enabled microcontroller came on the scene, it seemed like suddenly everyone came up with WiFi-enabled projects. But the ESP8266 is not the only game in town!