would be less forgiving at runtime tho (i.e. bumps to that version would require a release) - but would ensure a consistent setuptools in e.g. pex CI as coverage measure

We already effectively have this problem. We bound under the next major release when we release today.

👍