"Visitors to the site are vulnerable to Man in the Middle (MitM) attacks, IF they click past the warning". I think it's true when there is a man in the middle.

Based on history of this type of attack, it can also be true with a valid certificate ;)