> The sites that are affected by this have had nearly 2 years to sort out their upgrade to TLS 1.2 or 1.3.

... or are hardware appliances with a management interface, segregated on an internal VLAN, that will never be updated, but which were helpfully "forward thinking" enough to force HTTPS.