I'm happy to announce that all Boomla sites are now encrypted by default. The security certificates are signed by Let's Encrypt, an amazing service.
There is nothing you need to do. Certificates are automatically renewed about every 2 months.
When you create a new site, you may need to wait about 10 seconds for the first pageload while the certificate is generated.
This is great both for privacy and for better search engine rankings.