Just out of curiosity, don’t you think that in strictly versioned software, ie software that everyone has to be running the same version at runtime for it to work, you could enforce such versioning primitives?
I think there’s a world where forcing users to have a little choice as possible about how they use a cryptographic system keeps them safer, don’t you?