The cert process is why the ARRL DXCC desk signed off on LotW. So I'd hardly call it superfluous.
It is what it is. Is it tedious to set up? Yes. Is the security more that what is most likely needed? Yes. Is it more secure than most banking, credit card, and related financial sites? Yes, which makes me worry more about the security of those sites -- and over the last 15 years, the "gap" has been closing as the financial institutions catch up.
Is it going away? No. Is the security going to be made less restrictive? Unlikely.
That's the way it is. Kvetching about it won't change anything.