It's true that TLS 1.2 is still considered OK, but cacert now only serves on TLS 1.3, Windows 7's integrated HTTP stack only supports TLS 1.2 and below, and Scoop relies on using PowerShell or similar to download cacert before it can install curl, meaning I can no longer install curl that way on Windows 7 (still an OS nearly as usable as Windows 10 and Linux, though apps are sadly starting to drop support for it).