You still need to ensure that the IV is unpredictable, even if the ciphertext is authenticated, but then you still need to make sure CTR (or GCM) nonces are unique, so that nets out.

I do not know of any attacks against encrypt-then-MAC CBC-mode but I believe at least part of the rationale behind the migration away from CBC-mode is due to increased complexity of decryption. With CBC-mode decryption I have at least one extra step (validating padding), which as the blog post mentions has been troublesome.

I wonder about SSLv2's MAC which is basically MAC-then-encrypt with secret prefix MD5 with the CBC padding included in the MD5.