Hey folks!
This is something we have very recently fixed as part of this bugfix: Improvements to TLS and primary domain redirects for non-static assets - #4 by cataclysm
The change is slowly rolling out and only applies to Starter & Pro customers right now. It will soon roll to all customers.
I confirmed that for @B00bleaTea both the root and the www variant have the correct TLS redirect behaviour now.
@oliviertassinari it looks like you’re on a higher plan, so i opted in your site explicitly and it seems to behave correctly now.