Agreed. Bitcoind was never designed to be a server. And RPC over HTTP is insecure.
That’s why we have things like the Electrum protocol, which was designed to be a proper backend server for syncing. (You can design a different protocol, but that’s another story).
