nope, many run it with LND and that's also how it works on Umbrel and Start9.

If the certificate is provided then this is used to validate the connection.

The error handling might not be really good if an invalid certificate hex is provided.

But I know many who use it successfully in a setup like you describe.