The proxy companies behavior for TLS 1.3 is a bug and it's easier to fix; they just need to respond that they only support TLS 1.2 and below.