By this logic one could simply download Protonmail's TLS certificate instead of trusting a CA and access the service via clearnet. Fully decentralized. Discovery, once again, left as excercise for reader.