I don't really get the point to why Apple do not let us use the iDisk or any WebDAV in https instead of http.
I know about the digest in the authentication, but I think it would be a nice upgrade or at list a good option. Just like it works in the mail @mac.com, that works perfectly in IMAP and SSL.
For me that's enough argument to don't bother buying the .Mac from Apple!