The add-on does a great job by attempting to secure every internet connection established.
the only law is that it has no convenient option to hinder insecure connections on former secured pages.
It would be a great benefit if an option was available that would grant HTTPS Everywhere the role of a master rule so that pages listed as secure in HTTPS Everywhere do not fall back to http.