You're going to see a lot more of this, especially in the IoT world. PKI is becoming a requirement.
Kind of. Starting from 49, the <keygen> feature needs to be whitelisted per web-site. Client certificates are not anymore imported automatically, only downloaded (user action needed to load into the keystore).