Protecting those users _does_ matter.  As CloudFlare points out, many people simply cannot upgrade their devices to something that supports SHA2. Instead, the choice is either (1) they don&#x27;t get crypto at all, because SHA2 won&#x27;t work on their device, or (2) those users get SHA1, which is better than nothing. CloudFlare is advocating stance 2.