I was not going to upvote this, but your comment about "lawmakers might try to regulate who can get a certificate" because it is certainly possible since CAs ar

I was not going to upvote this, but your comment about "lawmakers might try to regulate who can get a certificate" because it is certainly possible since CAs are well centralized... Although, not likely since browsers don't rely on just one CA, and in theory not all CAs would be in the same jurisdiction. However, it still is something to worry about since you have systems like iOS where the user has no way to side load an other browser.