If letsencrypt would offer wildcard certificates with their url based authentification as they offer for non-wildcard certificates, it would be annoying but bearable.
But having to tinker with the DNS infrastructure for each project which wants to use domain wide HTTPS is so much hassle.
The problem is that letsencrypt does not offer url based authentification for wildcard certs.
So you have to temper with your DNS infrastructure so that you can automate DNS updates for your domain.
For good reason though. You shouldn't be able to get a cert for a domain you cannot prove you control. Lots of people have webserver access to a specific domain but not all subdomains.
I am not aware of any service that allows that.
Can you give an example? What do you mean by "lots of people"?