Feels very snappy, but for me it's a non-starter: rejects connection to any site with a self-signed certificate, with no apparent means of override.

I get the security stance, but I configure a LOT of networking hardware via WebUI (eg: Palo Alto firewalls - self-signed from the factory) and this makes it next to useless.