There should internal standards to always encrypt; even internal traffic. Instead of just drop TLS altogether; they could at least reencrypt to a secure protocol that they still support.