Lots of hosts are offering free LetsEncrypt via cPanel, which makes it easy to activate. WordPress dot org should use this as a metric when recommending hosts.