If you don't have identity as part of the process, the result doesn't do anything. TOFU is broken completely, there are studies showing SSH key rotations in a c

If you don't have identity as part of the process, the result doesn't do anything. TOFU is broken completely, there are studies showing SSH key rotations in a computer science department triggered no attempts to verify the key change at all. And the whole point of encryption is you think there's a MITM, so if you are using a scheme that doesn't stop MITM, why bother encrypt at all? Just bank the simplicity and performance savings and don't do it.