TL;DR? > The problem is strictly speaking not even in curl code. It comes with the version of LibreSSL that Apple ships and builds curl to use on their platforms.

But because they’re Apple (right next to the Pope, for infallibility), they know best; same old story, rinse’n’repeat.

Really liked their stuff back in the day. Now? It’s another walled garden they scrabble to maintain.

Anyone still using LibreSSL and not OpenSSL, has only themselves to blame. Or their company or whoever is forcing it on them.