Umbrel's lack of https

That's a CA thing, can't assign an SSL certificate to a local device without introducing some key-infra workarounds which is more complex than a local SSH tunnel to access the interface securely