Edge Certificate Settings Not Taking Effect

I agree, yes.

Qualys SSL Labs would report them, yes.
It could be done via an API to modify ciphers settings (allowlist):

Helpful article for cipher suites:

However, I am afraid this would require you to have an Advanced Certificate Manager subscription purchased for $5/month for your zone (which would also allow you to have e.g sub.sub.domain.com as an deep-level sub-domains covered with Cloudflare’s Universal SSL):

1 Like