GPLv2 by default means GPLv2 or later, so GPLv3 is perfectly valid indeed.

That's actually not true. GPLv2 by default means v2, not v3, unless you explicitly allow "or later."

Linux is actually the famed example of v2 but not v3.