Good News for free WordPress Hosting , On 9th April WordPress has announced SSL, https URL to all its free Subdomain hosting on its wordpress.com domain.
SSL has already been given a high priority by good and most business like facebook, twitter etc have moved to compulsorily on SSL URL. WordPress has really take a big step which will surely help in improving wordpress security and SEO and performance of xyz.wordpress.com.
Sources : https://en.blog.wordpress.com/2016/04/08/https-everywhere-encryption-for-all-wordpress-com-sites/
Incase you are looking for self Hosting WordPress Hosting checkout : https://www.webhostuk.co.uk/wordpress-hosting.html