Absolutely, which is why I included the extra point: If you want the client/server to trust a restricted list of servers/clients, most clients and servers have

Absolutely, which is why I included the extra point: If you want the client/server to trust a restricted list of servers/clients, most clients and servers have that capability. If you are running a regional power grid, TLS as a technology is still fine, but you should absolutely not trust the default PKI.