Apologies for this, I meant restrict to xpub/<m;n>/*
. The other optional derivation paths are not allowed.
With the above clarified restriction, that would apply to descriptors as well. A descriptor could only use an xpub in the form xpub/<m;n>/*
. This would be a new restriction on both descriptors and wallet policies that implementing this standard would require.