Frankly at this point I'd happily accept it if certbot required docker or k8s over snap.

At least then I know I'll have to run it in a container (and give up then) instead of waste hours figuring out why I get a snap error message when I try to run/install certbot before finally coming to the conclusion it is impossible.