[qrmn]

Microsoft could push a security update enabling TLS 1.1 and 1.2 by default?

(I'm not saying they will, but they could.)