Does that really make the site insecure, though? What’s the scenario, someone has launched an elaborate ARP cache attack in order to MITM a website about roads

Does that really make the site insecure, though? What’s the scenario, someone has launched an elaborate ARP cache attack in order to MITM a website about roads on Hawaii in order to get you mildly lost so that you have to pull over and look at Google Maps for directions, costing you an extra minute of travel time?