Let's Encrypt also mitigates this by validating from multiple vantage points, so a single man-in-the-middle is insufficient.