[slimsag]

Just do what game consoles do: add hardware fuses that are expected to be blown depending on the version, and have the bootloader verify the number of fuses blown on boot. Then the device becomes a brick if it tries to boot an older firmware.

[loeg]

Really bad customer experience if there is a regression in a new firmware version, though.