While I personally agree with making the entire web run on https, I can definitely see the argument that it requires more monitoring and maintenance, especially

While I personally agree with making the entire web run on https, I can definitely see the argument that it requires more monitoring and maintenance, especially when your certificate provider changes their protocol. I wonder if there can be a future drive for a system where this is not required anymore, and where we can create a decently standardized form of encryption of the same or better quality as TLS, without being dependent on external services.