The world if CAs were technically limited to specific scopes, allowing me to obtain a CA to create my own S/MIME certificates for my domains instead of paying, idk, $5/address or whatever commercial CAs want these days: