This is how websites work, not a bug or a security issue.
Setting up HTTPS prevents bad actors from reading the payload.
https://discourse.cubecoders.com/t/setting-up-secure-http-https-with-amp/2305
1 Like