There are plenty of IoT devices that are mains powered, and also many modern microcontrollers include an HTTP stack (e.g. the eps32). But yeah I agree it does seem pretty stupid to say "It's easy! Just use http, SSL, websockets and JSON!" when your device might be sending a single bit and running off a coin cell.