The HSTS preload list also has a huge scalability problem, but it's also improved the situation about HTTPS downgrades a lot!