We control your bass, and we control your treble
And, let's face it, we've always known that the users will never make decisions for themselves, instead doing whatever the browser (that they do trust) tells them to. We don't control the EV certificates, but we do control Let's Encrypt. And that's fine, because what we really need is control over your web site. You know, for the children.
It's difficult to make your own certificates. But not impossible--so we no longer trust those. Instead, we made sure you have to buy them with money, or use our friendly-named "Let's Encrypt" service to get one. That gives us control over your domain: we can shut it down in a heartbeat with a revocation.
Unless you're big enough to have a fancy cert, we own you.
Biting the hand that feeds IT
