None of what you are saying actually matters (regardless of one's position on those issues), because it's trumped by the fact that if you use cacert, users can'

None of what you are saying actually matters (regardless of one's position on those issues), because it's trumped by the fact that if you use cacert, users can't reach your site. It's wrong to defer this problem to the user, always.