> Sometimes I care only about my traffic being encrypted, and resent having to jump through hoops to ignore the name mismatch.

Why do you care about encryption without authentication? Without TOFU, PKI or a preshared key what is the value?

> Sometimes I care only about assurances that the name is correct, and don't care about having the traffic encrypted.

So signing?