Vulnerabilities were detected in TLS 1.0, and so for this reason it is disabled by default in Windows. TLS 1.3 is aimed to make sure less user information is available in plain text.