Depends why you want to get users upgraded. If you want your users to be upgraded so they have access to security improvements, and those security improvements

Depends why you want to get users upgraded. If you want your users to be upgraded so they have access to security improvements, and those security improvements require TPM 2.0 or whatever, then allowing upgrades on older systems without TPM 2.0 rather undermines the point of getting those users upgraded.