When I migrated to an RB5009 and an HAP AC3 I also migrated my internal Freeradius server to User-Manager with PEAP-MSCHAPv2 and TLS for WPA2 / WPA3 Enterprise.
In Freeradius I can disable old end-of-life TLS versions so that my devices are connecting with TLSv1.2 or higher.
In User-Manager I can do a connect with TLSv1.0 and TLSv1.1, I would really like to see those (in 2020 end-of-life) disabled or an option to disable these.
Running RouterOS 7.2 on both devices.