painful maintenance - most users don't want to manage certificates and crypto keys especially in a multi-device world. that's likely the main one If you don't

painful maintenance - most users don't want to manage certificates and crypto keys especially in a multi-device world. that's likely the main one If you don't use a hardware module certificates are easily stolen by malware and as revokation is often problematic, stolen certs can be quite bad news.