I’m guessing the way this is going to work in practice is an update would be allowed if it contains a violation but the violating behavior is substantially the same as the existing version but had not previously been flagged.
New violating behaviors and existing violations behaviors that had previously been flagged would prevent the update from being approved.
New violating behaviors and existing violations behaviors that had previously been flagged would prevent the update from being approved.