Hey guys,
I just tested it out on my localhost and this is what I get:

The image loads just fine and preserves the HTTPS protocol.
I see the replacing (https => http) would be done in some cases (ex. is_ssl() is true), but I think the site admin may want to enable/disable it.
There’s is a replacement but it’s the other way around: if the website uses SSL and it tries to load an image from a none-secure URL (http), it’ll replace http with https:
/**
* Render image tag.
*
* @since 3.0.0
* @access public
* @param string src Image URL
* @param array dimension Image's width and height
* @param string class CSS class
* @param object $post_object Post object (must contain, at least, the properties id and title)
* @param string error Error, if the image could not be created
* @return string
*/
public function render_image( $src, $size, $class, $post_object, $error = null ) {
$img_tag = '';
if ( $error ) {
$img_tag = '<!-- ' . $error . ' --> ';
}
$img_tag .= '<img src="' . ( is_ssl() ? str_ireplace( "https://", "https://", $src ) : $src ) . '" width="' . $size[0] . '" height="' . $size[1] . '" alt="' . ( ($post_object instanceof stdClass && isset($post_object->title) ? esc_attr( wp_strip_all_tags($post_object->title) ) : '' ) ) . '" class="' . $class . '" />';
return apply_filters( 'wpp_render_image', $img_tag );
} // render_image