Same problem still exists, if the TLS cert for server.com is compromised, then you can still have a MITM, right?