I think the entire point is so that many with devices that will never see updates can still continue to use those devices.

These prescriptions apply only to (D)TLS 1.2, since (D)TLS 1.0 and TLS 1.1 are deprecated by RFC 8996 and (D)TLS 1.3 either does not use the affected algorithms or does not share the relevant configuration options. (There is no DTLS version 1.1.)

better to break tons of existing installations and require confusing, arcane config file modifications just for folks to get things back to where they were before being broken