Google have been ranking secure (SSL encrypted) sites more highly since way back in 2014.
In 2014 it only gave a slight boost, but since then Google have been using SSL as a stronger ranking signal. It is now one of the reported 9 things Google use to rank websites.
Of course all sites should ideally be secure, even if they don’t collect sensitive information. HTTPS protects the integrity of your website and stops not only malicious hackers but also more benign intrusions, such as injecting adverts into your site.
Site security certificates have been expensive in the past, with monthly or annual fees that made them uneconomic for small sites.
These days however you can even get security certificates for free from the likes of Let’s Encrypt.