I'm remembering an argument about ActivityPub from a while back that went as follows:

Sensible People: "There should be a requirement to use TLS"

Objections:
- Nuh uh because corps can snoop anyways
- Why do you need to protect this? Is it really a big deal?
- But it won't protect against every attack I just made up so why bother