Yeah buy why would anyone go through the trouble of bootstrapping a whole new PKI instead of just flipping an if statement?

I'm curious what other use cases there have been for domain-validated client certs aside from XMPP.