> but I guess because no one at Apple was willing to maintain it and it apparently is a frozen API that doesn't support newer than TLS 1.2 (!)

Well yeah, so not really curl's fault here.

More importantly, IIRC Apple's curl actually stopped using SecureTransport before upstream dropped it.