The lack of TOFU in browsers is an extreme pain point.

I'm going to go out on a limb and say that it is on purpose, and not a good purpose. The trust model of the web is fundamentally broken.

The way I see it, it's just different.

IMHO, the web should be to load websites (obviously) and small webapps that don't require E2EE or any kind of auditing. As soon as those are desirable, it shouldn't be a webapp anymore.

I find it nice to be able to load websites in my browser, instead of installing one program per website.

But sometimes I want a program.