I haven't tried out the release UX yet but if it is just a couple of clicks inline when you fist visit this doesn't sound that bad. I would go though it for the added feeling of privacy and security whenever I am on a public connection.

Well, you have to specifically enable this feature. So don't enable it.

For now. These features tend to migrate from being optional to being default to being default and hard to turn off

Which indeed is why I said I likely will not use the feature above.

You could use a self signed certificate.