It has to do with the parenthesis around the security response letter and how websites parsed it looking for the contents of said parenthesis. It went from expected values to just “a” with the initial security response update.

There’s only a certain subset of things a security response update can address and I don’t think they wanted to increase the version number just for this.