[azernik]

The bit that's less practical for consumer setup is more the cert distribution and setup of separate credentials for each user. (The RADIUS server could even be built into the router in a consumer product.)

[gsich]

That's not needed, trust on first connect.

[gruez]

and what do you do if the certificate mismatches? 99% chance the average person will click through the warning because they want internet now.

[gsich]

Correct. You can't solve every problem with technology.