Package updates are a bit controversial point in the openSUSE world and sometimes are related to questionable user experience, especially for those who are outside of Europe and the US.
It is important to understand that it is controversial to compare to experience in other distributions because openSUSE infrastructure is responsible not only for downloading Leap and Tumbleweed packages but potentially any other OBS project on any supported architecture / OS. This makes openSUSE infrastructure care about ~95000 various projects, which can receive updates every moment; compared to 5-8 projects with more or less defined release schedule in the typical infrastructure of other Linux providers.
Wichtig ist auch in diesem Zusammenhang (redirector und download.opensuse.org) dieser Satz:
Not like https improves security drastically, but rather it is a good practice anyway.
Auf gut deutsch:
Nicht das https die Sicherheit drastisch erhöht, es ist nur die zur Zeit benutzte Praxis.