Personally, I was really hoping the backend connection would be secured by spiped, cutting the unnecessary complexity of TLS and certificate validation completely out of it.

That might exclude Windows servers (until someone ports it), and maybe harder in some cases to setup.