If you use a custom domain without a security certificate, visitors who access your site using https will typically see a security warning displayed by their browser (e.g. "not secure" or "connection not private"). They can ignore it and use the site but may be scared away by the warning.
Custom domains look like whatever.org instead of whatever.wildapricot.org.
For information on ordering a free security certificate for your custom domain, click here.