This post is not relevant anymore, but I'm adding an answer just for future reference and for having closure. As it turned out, my understanding was correct: if a 3rd party SDK was already used in previous app versions, the new requirements do not apply to that SDK and we can keep using its older release.