I would highly recommend that all of the official Cardano sites gets an EV cert. Also here thinking about the Daedalus wallet site and downloads. I know that EV certs. is not a fix all phishing problems. But it at least will raise the bar a bit since its trivial to get a normal TLS/SSL certs.