Disable tls 1.0 from origin server with default CF Settings

#1

Is it possible to keep the default allow TLS 1.0 global setting and setup the origin server in such a way that TLS 1.0 in not allowed for the user to CF connection?

#2

I believe Cloudflare always speaks 1.3 and has a fallback for 1.2 to the origin, but connections from browser -> CF are based on TLS settings in the CF dashboard.