"Although it's trivial for a properly-programmed client to protect against this downgrade attack,..."

...that defeats the "use TLS when available" argument.