In the past, those defaults were based on the Mozilla recommendations, with maybe some allowance for old Operating systems that needed to use an outdated cipher just to download the installer. Looks like Mozilla has transferred their guide over to: docs.tlsref.org/cipher-suites.html