Yup, that's a thing that happens if someone is linking an image from somewhere that doesn't use HTTPS. I don't want to break embeds for old sites by automatically rewriting things. There isn't much of a practical problem with having non SSLed images.