You can see the behavior here:
https://wabicc.makeduconsult.com/en/resource-center/gallery/
The thumbnails are https. The actual images are http. This staging site does not enforce https for the actual images, so the user is not aware. When we move to production, https is enforced, so the thumbnails work, and the big images are broken.