I think people need to understand what's protected. Something like "https guarantees that your are connected to the website displayed in the address bar and that no one can see the content of the communication"

It's important because for example it makes it clearer why they should still check the url in the address bar (and not get phished) or that the communication with the website itself is not hidden (only the content is), etc.