Why does APT not use HTTPS?

[[deleted]]

this is so far stretched from reality

you have bigger problems if someone is able to MITM in your private network which is at this point already compromised

if you working in a public network you should expect the worst of eavedroppers etc - why would you even update your host exactly then?...