The reason I think Varnish needs a native TLS implementation is to be able to talk directly to TLS backends. Otherwise you have a gaping hole in your stack should one need Varnish to communicate over the Internet.
Ah, interesting. It looks like that feature has been added to Varnish Cache Plus, but it hasn't yet made its way into the generally-available open source product.