Because there’s like 50 totally trusted and totally sketchy CAs that you have to rely on? Also DNS is quite simple, HTTPS+CAs+TLS on top is a *lot* more complexity that you can just…. Not have.