Another reason in support of that is that all of Let's Encrypt's certificates are domain-validation certificates whose subjects are DNS names. The subject is never the name or identity of an individual person or organization. If you're authenticating individual people, control of DNS names is not usually a convenient thing to make them prove, and if those subject names are all subdomains of the same domain, you can also quickly run into Let's Encrypt rate limits.
7 Likes