I’m good. I know very well there are uses cases for a self signed cert. LE is still far more practical for 99% of use cases, even internally.

But then you have to distribute CAs to all the devices that will reach this service, and not all devices allow that.

I’m with you, but that’s why I’m automating certificate expiry checking somewhere else (in my home assistant install to be exact).