MITM is a risk to everyone. End of story.

The browser content model knows nothing if the data it's receiving is static or not.

ISPs had already shown time and again they'd inject content into http streams for their own profit. BGP attacks routed traffic off to random places. Simply put the modern web should be zero trust at all.