Exactly. This false notion of security was perpetuated by CAs for marketing purposes. It&#x27;s their fault if users now mistakenly think HTTPS == trustworthy.<p>They basically sold certs as something they&#x27;re not and now complain that people may realize they don&#x27;t actually serve that purpose now that they&#x27;re made widely available without the false pretences.