> If you want to make a tiny web server, like on a microcontroller, encryption is the hardest part

Even an esp32 can (just) handle TLS. Given relatively modern designs, you end up on remarkably small chips before TLS is a real blocker

Seconded. I got a Gemini server running on an esp8266 once, there really isn't a lower bound.