but they fix a lot more problems than they cause

I didn’t say anything that disagrees with this. CAs are nice and convenient. They do this by expanding the chain of trust to a lot more people, hence making them less secure.

Sure if you can’t securely manage your cert, that’s a problem. But that doesn’t mean let’s less secure