Well they apparently are not at all familiar with ZenCart
As you have determined this is not the desired way to operate
ZenCart code is smart enough to know when to switch to ssl for only those pages/functions where sensitive information is to be exchanged

I can't see where your cart is???