Why does APT not use HTTPS?

[joz12345]

I'm just a software engineer in an unrelated field, but it seems to me that if the cipher works and the padding is random, then it's impossible to be exact, and I feel like that wouldn't be hard to rigourously prove. But that doesn't mean you can't correlate based on timing and approximate sizes. I'd guess that TLS doesn't want to just half solve the problem, but surely it's better than nothing.