Yes. A new security release should absolutely remove the old release or at least disable any ability for less-than-fully-trusted code to invoke it.