version numbers are never immutable. they are arbitrary labels that are created by some centralized authority and can be changed by that same authority.

artifacts being removed is much less of a problem as artifacts being spoofed with malicious content.

They were made immutable after the issue was already widespread. Which is also why I'd heavily encourage to use hashes to pin container versions, even though people might not see the immediate need to do so.