I think their point is that any connection that LE makes to example.com in order to verify ownership will be insecure and thus vulnerable to MITM. Not a proble

I think their point is that any connection that LE makes to example.com in order to verify ownership will be insecure and thus vulnerable to MITM. Not a problem specific to LE, but to any DV cert.