Re rewrite rules: That sounds like the same type of thing we tried with our KNOWN_HTTPS_SITES config (pr #2042) and I think it would be an excellent idea to use your list going forward. Would you mind writing up an implementation spec as a Github issue for further discussion and eventual development?
Re: YAY! More HTTPS!