There's still confidentiality (encrypted transport) and authenticity of the server, how is that the same as null'd ipsec?