If content delivered over mail is insecure and it's build up of html, why don't we take the same precautions for websites?

Well the question says it all.

Why do we do so? Can't we just have the same precautions online as email?