It's easy to use ettercap to mount a man-in-the-middle attack?

Self-signed certs are only vulnerable to mitm attacks, but don't most network topologies make doing that pretty hard?