Like the TSA at the airport.
Security that we never needed before, but now suddenly we do.
Now we’re dependent on a third party gatekeeper for permission to have a web site.
Free, for now.
It’s a move by the weasels-that-be to turn the Internet into yet another tool for profit and control.
But if you needed permission to be a certificate provider then you’d be stuck.
Once you are dependent upon that official certificate, upon that issuer, you’re stuck. At their mercy.
If your browser or your OS insist on only trusting $1000 certificate, blocking access to most of the internet, then change the browser or OS. There is no grand authority telling which root certificates can be trusted. Yes, Google or Apple could scam their users this way if they wish to, but it would not make much sense for them. People would use something else.