This mental model is oversimplified enough to be misleading, throwing up your hands too easily. See eg the Snowden revelations and pervasive passive eavesdroppi

This mental model is oversimplified enough to be misleading, throwing up your hands too easily. See eg the Snowden revelations and pervasive passive eavesdropping, and the spectrum of increasingly risky/costly operations icreasingly valuable spoils that can't be had with easier methods. Rogue TLS certs are risky to use because the CA gets burned in the transparency logs.