For some users, preventing downgrades to an insecure version is a better product since it protects against evil maid attacks.

(Although ideally they would itself trap that functionality behind a fuse, so you have to opt-in but can't be opted out.)

You can get a similar level of protection against evil maids by requiring a wipe to downgrade.