> I know that some people have said they don't like running a large new application as root, even when it's open source.
Certbot could be configured to run without root with little effort, at least the part exposed to the web that was my concern.
If you don't like Certbot, we definitely encourage you to use one of the many other implementations:
https://community.letsencrypt.org/t/list-of-client-implement...
Some of these are much lighter weight than Certbot and have many fewer dependencies. You can also take your pick of what language they are written in and how they are installed on your system.
You're also welcome to write your own client that speaks the ACME protocol. Let's Encrypt is near to rolling out an API endpoint that will speak the IETF-standardized version of ACME, developed through an open standards process and in consultation with other implementers.
I know that some people have said they don't like running a large new application as root, even when it's open source. So, please have a look at some of the other clients and see if one of them strikes your fancy!
Let's Encrypt's operational funding is thanks to these entities
https://letsencrypt.org/sponsors/
which view the service as worthwhile and important and have chosen to donate funds to support its operation. The organization is overseen by these people
https://letsencrypt.org/isrg/
In this model there is no need to charge users for certificates or try to indirectly monetize the use of the service, although users are very welcome to donate if they find the service useful, and Let's Encrypt may be more sustainable if some users choose to do so.