Sure. The point is, don't bother letting the apps themselves do TLS termination. Too much work that's better handled by something else.

Also, moving termination off the endpoint server makes it much easier for three letter agencies to intercept + log.