As they should... AES-128 is the objectively better choice. AES-256 is more computationally expensive, and provides no security benefit.

In fact, there are _more_ attacks against AES-256 thanks to the extended key schedule.