I appreciate the explanation. I just want to pick up on one thing:

> it would be easy to modify AES

That's "a solution exists".

I helped migrate off TLS 1.0. It was not a small project, for non-technical reasons.