ssl docs say that ssl.SSLContext() is secure-by-default since 3.6, but it isn't

GitHub fields:

assignee = None
closed_at = None
created_at = <Date 2019-09-05.07:31:45.928>
labels = []
title = "ssl docs say that ssl.SSLContext() is secure-by-default since 3.6, but it isn't"
updated_at = <Date 2019-09-05.08:01:10.313>
user = 'https://github.com/njsmith'

bugs.python.org fields:

activity = <Date 2019-09-05.08:01:10.313>
actor = 'christian.heimes'
assignee = 'none'
closed = False
closed_date = None
closer = None
components = []
creation = <Date 2019-09-05.07:31:45.928>
creator = 'njs'
dependencies = []
files = []
hgrepos = []
issue_num = 38036
keywords = []
message_count = 2.0
messages = ['351186', '351188']
nosy_count = 5.0
nosy_names = ['janssen', 'christian.heimes', 'alex', 'njs', 'dstufft']
pr_nums = []
priority = 'normal'
resolution = None
stage = None
status = 'open'
superseder = None
type = None
url = 'https://bugs.python.org/issue38036'
versions = []