Discussed in https://blog.r-hub.io/2022/09/12/r-dependency/.
Something that is not discussed in the blog post: the tidyverse is so omnipresent in the R ecosystem that they will likely force any user to update their R version.
This means that in practice, all potential users will use one of the latest 5 versions so we can just stick with this policy.
From the allRSE meeting of 2023-04-12: