That’s a reasonable point, under the restricted set of functionality that encompasses a hash-assertion and a disjoint signature over the transaction itself.
So you could have a “next tx” transition or override with some (non-aggregated) key or require both.