The local client app is needed to verify that you actually own the domain. 3 month certs are actually more secure since there is shorter amount of time in which they can be stolen & used. The goal of letsencrypt is to make re-issuing certificates automated, so even a 1 week certificate is no problem since you can run a nightly cronjob to refresh it.