Why does metasploit SSL scanner only show highest version available?

Question

I'm trying to scan my server (Apache2 on Debian), which is configured to support only TLS1.2 (and 1.3, presumably?). The config line is:

SSLProtocol all -SSLv3 -TLSv1 -TLSv1.1

I scan it with:

msf6 > use auxiliary/scanner/ssl/ssl_version
msf6 auxiliary(scanner/ssl/ssl_version) > set RHOSTS my-server.com
msf6 auxiliary(scanner/ssl/ssl_version) > run

No surprises there, metasploit reports:

[+] server-IP:443         - Connected with SSL Version: TLSv1.2, Cipher: ECDHE-RSA-AES256-GCM-SHA384
.... certificate information (it's a Let's Encrypt up-to-date cert)
[+] server-IP:443         - Connected with SSL Version: TLSv1.2, Cipher: DHE-RSA-AES256-GCM-SHA384
[+] server-IP:443         - Connected with SSL Version: TLSv1.2, Cipher: ECDHE-RSA-AES128-GCM-SHA256
[+] server-IP:443         - Connected with SSL Version: TLSv1.2, Cipher: DHE-RSA-AES128-GCM-SHA256
[+] server-IP:443         - Connected with SSL Version: TLSv1.2, Cipher: ECDHE-RSA-AES256-SHA384
[+] server-IP:443         - Connected with SSL Version: TLSv1.2, Cipher: DHE-RSA-AES256-SHA256
[+] server-IP:443         - Connected with SSL Version: TLSv1.2, Cipher: ECDHE-RSA-AES128-SHA256
[+] server-IP:443         - Connected with SSL Version: TLSv1.2, Cipher: DHE-RSA-AES128-SHA256
[+] server-IP:443         - Connected with SSL Version: TLSv1.2, Cipher: AES256-GCM-SHA384
[+] server-IP:443         - Connected with SSL Version: TLSv1.2, Cipher: AES128-GCM-SHA256
[+] server-IP:443         - Connected with SSL Version: TLSv1.2, Cipher: AES256-SHA256
[+] server-IP:443         - Connected with SSL Version: TLSv1.2, Cipher: AES128-SHA256
[*] my-server.com:443     - Scanned 1 of 1 hosts (100% complete)
[*] Auxiliary module execution completed

Then, on my server I remove the -TLSv1 -TLSv1.1 from ssl.conf (leaving the config line as SSLProtocol all -SSLv3), and restart the service (sudo systemctl restart apache2.service).

I re-run the metasploit scan, and it reports exactly the same (it only shows connections with TLSv1.2).

I guess my question is: is it that my server only accepts TLS 1.2? (if so, why?) Or is it that metasploit only scans using TLS 1.2? (if so, why? the variable SSLVersion is set to All)