your business faces regulatory/compliance issues which are satisfied by encrypting the connection, even if it provides no direct security benefit.