11 to 12 update resulted in 'weak ciphers' enabled in Services > SSH

After updating from FreeNAS 11.3-U5 to TrueNAS 12.0-U2.1 and reviewing various settings, I noticed that in Services > SSH, burried behind the advanced option, that both 'weak cipher' options were enabled.

That seems like a poor default. I think it would be better to default to something secure, and let uses consciously reduce their security if necessary.