The option to continue to allow non TLS should alleviate concerns. I can think of cases where vendor managed internal self signed certs are problematic and som

The option to continue to allow non TLS should alleviate concerns. I can think of cases where vendor managed internal self signed certs are problematic and some IoT don't do TLS. Without getting into ideological debates, having a way to work around old, incomplete or clunky systems may be important to keep the browser relevant or useful.