According to NSA and ANSSI, RSA with 3072 bit-modulus is the minimum to protect up to TOP SECRET.
We should not be in the red line of cryptography. This security by default will bring the needed protection for all the Internet users that pass by HTTP webservers powered with Let's Encrypt.