Then you usually don't need a certificate from a CA. Just selfsign.
I think that's the point. Creating friction that scares normie users when people are using web UIs on local networks puts non-cloud based products at a disadvantage against the centralized giants.