>certificates from authorities with a slightly dubious track record

CAs can sign certs for any website, that absolutely makes the web less secure.