They announced they're going to sort this today, huzzah: https://cloud.google.com/appengine/docs/standard/secure-minimum-tls