Simply put...NO!
Now if you go digging you will see the official Microsoft documentation stating that it is needed for failback for some HTTPS services. From a security standpoint if the HTTPS services aren't working then I will refuse to go back to an unencrypted service just to keep it working.
Some will say if you're keeping Exchange patched and updated then having port 80 open to Exchange is no big deal. While that may be true why risk it?
I had a customer recently that was asking why their Exchange server was showing C&C callbacks being blocked from the outside, why are there other items being blocked from the outside. Each thing in the endpoint protection logs showed this server was being attacked on port 80.
I connected to their Cisco ASA and disabled the rule allowing port 80 to the Exchange server. Guess what, a week went by with no further attacks being blocked. Even though the endpoint protection was stopping them, it would only be a matter of time before an exploit is found via port 80 and then there goes the server's security posture.
I don't see a need to expose this port in 2023 on the modern Internet with all of the risks we already face daily.
Just be smart and disable port 80. If your application won't work without it then it's time to update the application or get one that is more focused on security. Don't compromise your network security to accommodate old software.
My $.02.
Good luck!
