> Not for technical reasons, but because of an arbitrary lock (achieved through signature).

There is a good reason to prevent downgrades -- older versions have CVEs and some are actually exploitable.