Oh for sure you want to use TLS, what's insane is the developer experience of needing to implement it yourself.

The author chose a library that didn't support TLS, written by a company that isn't Microsoft. Terrible devex indeed but hard to see why that's the fault of the platform that required TLS.