Re: No, this is wrong
(e.g. >£50 annually for a single domain SSL certificate from Heart Internet).
If Heart don't have Let's Encrypt enabled for their cPanel hosting & Wordpress hosting then move. I can recommend UnlimitedWebHosting(.co.uk). They keep up to date with new versions of cPanel & Plesk, including niceties like the Let's Encrypt plugins.
UWH do indeed offer SSL certs separately on their site, but that's if you want an EV or just like spending money. It's got Let's Encrypt included.
UWH also voted correctly in the Nominet EGM, whereas Heart are owned by GoDaddy (via Host Europe Group).
Host British!