It's a lot safer than it used to be for the reasons you described but there is still a lot of software that doesn't use that mitigating technology. There are s

It's a lot safer than it used to be for the reasons you described but there is still a lot of software that doesn't use that mitigating technology. There are some attacks on the browser like trying to strip the ssl in a way that the browser will not complain or trying to catch an unencrypted something or another. But you also have other things like mitming software updates for other applications, OS misconfigurations. I'd say overall less dangerous but still somewhat dangerous.