FWIW I’ve had great success using ghostunnel[0] instead of stunnel in prod. Big fan.
stunnel supports TLS1.3; from the client side IME it works really well
ghostunnel appears to have a large number of dependencies on Go libraries written by a variety of third party authors
stunnel is a long-running project dating from 1998, managed by the same single author over the entire period