A lot of non-EV certs are given out if you control one of about 6 pre-defined email addresses like webmaster@. The security is already lacking given SMTP's bad

A lot of non-EV certs are given out if you control one of about 6 pre-defined email addresses like webmaster@. The security is already lacking given SMTP's bad security architecture and I'd argue that LE's protocol is a lot better.