[crypto_graphy]

TLS 1.3 doesn't change that, you can still MITM connections using your own root CA certificate installed on users' devices. Not quite sure what you're arguing against here.