knowing about security concepts is quite a bit different to knowing the details about the currently established standard of encryption and its next iteration.

We're talking about the changelog of TLS 1.2 to 1.3, not the general attack vectors for web applications.