4. The culture of fear around HTTPS, meaning only the "most secure" or "newest" protocols and cipher suites are to be used. This prevents older clients from working, where HTTP works just fine.
This is important. I have several devices at home that cannot display many web sites because they don't have the ability to use latest ciphers.