> For example, support for downgrades means you a security vulnerability can be reintroduced by a malicious user which may not be desirable.

Backports exist because of this reason. Just added them as a requirement to the list of rules above.