The intro articles in the SDK docs use insecure connections for a quick and easy start.
This should be eliminated from all but the most basic examples - and only kept there if it is essential for quick onboarding (and should be called out in the text and with a comment in the code).
For CE, so long as TLS is an EE-only feature, equivalents will have to be noted.
Note, a dockerised Server is now provided for Sample app, so only a passing mention needs to be made in the sample app docs.
Currently marked as SDK 3.3, this Epic may take longer, as we wait for CE to get TLS - to save having to do the workarounds above.