[Nursie]

The average user may well be MITMd by their own government. Doesn't seem that unlikely any more.

Either way, self signing is not as secure as using a CA and it is not just browsers being picky.

[Karunamon]

..in which case they'd just compel the CA to cough up a certificate. This does not apply, at all, to the argument for or against self-signed certs.

[Nursie]

Depends on the government involved, and on the user, and on the authority.

And then it's still no worse than self signed even in the worst case.