Hacker News Reader

I don't see the contradiction here.

There's still confidentiality (encrypted transport) and authenticity of the server, how is that the same as null'd ipsec?

You missed the point.