Not really. TLS 1.3 at least does a certificate-free ECDH handshake, deriving symmetric encryption keys that are then used to transmit the certificate(s) and an

Not really. TLS 1.3 at least does a certificate-free ECDH handshake, deriving symmetric encryption keys that are then used to transmit the certificate(s) and any further negotiation. You can deploy TLS 1.3 without leaking anything to a passive observer, and blowing up in the face of an active (MitM) observer.