CodePen now defaults to https if no referrer is present or the referrer used HTTPS.
We think it’s good to go. Testing below.