Safari 18.2 on iOS/iPadOS connects over HTTPS by default.

Also, there’s a setting for HTTPS-only which prompts the user to accept or deny a fallback to a non-secure connection.
https://webkit.org/blog/16301/webkit-features-in-safari-18-2/