My perspective on this, from the client side, doing my routine sysadmin work:
When disabling TLSv1 on a server, I'm no longer able to verify that using openssl s_client -tls1, I get "s_client: Option unknown option -tls1". Also I am unable to connect to some old servers supporting only TLSv1. I came across both types of issues just in the past 24 hours. I can always downgrade, or just use a stretch (or older) system for this minor task, but it seems this issue could be rethought. I think hard-disabling at compile time is a little too soon. Thanks, Gedalya
