If you go down this path you argue desktop browsing https is broken, which i dont think is a serious argument.

No one is trying to go that far down the path.

https (specifically the CA chain of trust) is imperfect, and can be compromised by well-placed parties.