Why Allow Http1 Traffic?

HTTP1 is almost entirely bot traffic. Some of these bots are good, most are not.

Why hasn't everyone switched HTTP1 to an "authorized traffic" model?