That's still an improvement. Security is important, and I would prefer to not see sites which are insecure by default, even if it means losing some small minori

That's still an improvement. Security is important, and I would prefer to not see sites which are insecure by default, even if it means losing some small minority of sites. Going forwards I expect we'll see more webservers with Let's Encrypt-by-default, so it's a limited-time problem; it shouldn't affect many people after the initial shakeout. On NixOS, enabling LE is no harder than putting "services.nginx.virtualHosts.<hostname>.enableACME = true" in my configuration file.