To be more precise, they offer no defense against MITM <i>on first visit</i>. Once I&#x27;ve pinned a particular self-signed cert for a particular site, I&#x27;ll be quite suspicious if that cert ever changes.