This assumes that passive attacks and active attacks are the same. Self-signed doesn’t protect against active MITM, as you note. It does protect against passi

This assumes that passive attacks and active attacks are the same. Self-signed doesn’t protect against active MITM, as you note. It does protect against passive attacks, in providing privacy against eavesdropping and resistance to packet/content injection on the LAN.