@MechMK1 I believe your answer can be improved with just two points
1. Discussing forward secrecy. I think all TLS ciphers in 1.3 implement it, but mentioning it out loud would shut the leakage of the private key X MiTM.
2. Discussing that MiTM is somewhat not possible because TLS has a very strict sequence and anything that goes rogue (to the listener) is rejected from the other side.
Your answer came to say everyone uses it, use it.
But I guess you were trying to talk on a managerial level?
I think no answer actually discussed these major points on how TLS achieves it, and why adding any…