I've been messing around with Python to automatize downloading webpages and images when needed, and for that I'm using `urllib.request`, usually authenticated to the sites with my login. As someone still very ignorant about internet security, I heard HTTP connections are not recommended due to the fact that the information you send to the website (including usernames and passwords) gets exposed to your ISP and possibly hackers.

Would using urllib.request only on addresses starting with `https://` automatically secure me, at least from the problems related to HTTP described above?

Or do I need to set up some stuff on my side too? Searching about this question online I found out it is recommended to at least use `ssl.create_default_context()` as the context for urllib methods which I'm gonna do from now on. So basically:

1. Should I be worried about the passwords I used without the ssl library's context? Are they (and all the data I exchanged) exposed to my ISP? Or did connecting only to https URLs automatically protect me from this particular problem?
2. If my passwords are indeed unsafe, will using the default context (after changing my passwords) help here? Or that's not enough?