> CLI tools are not to be feared or considered somehow hacky.

I agree, you're on a *nix OS, calling a CLI tool should be a perfectly valid way to do something.

IMO the real issue is that Apple's built-in CLI tools aren't properly integrated with the rest of the system. Apple's curl used to use the same certificate store as the rest of the OS, then Apple changed it.