A DNS alt-root and something like x402 would fix this
Claiming your root is more secure isn't enough, what can people DO with it and WHY should they care? I've ranted enough about this to deaf ears over a half decade to no avail. Even if Dap doesn't end up being the first credible alt-root, I do hope something appears and is not immediately linked to (objectively) illegal/evil activity.
[1]: https://dap.sh
[2]: https://handshake.org