Agreed. I don't think unpublish should even exist and it just creates all these scenarios full of subjective decisions that will help some and harm others.
If 1.0.0 was published and it has a serious bug, publish a new package with the bug fix. Let 1.0.0 alone forever.