Can’t one SSID support different WPA versions across APs? I’m pretty sure all my devices just shrugged and connected when I downgraded my (single AP) SSID from WPA3/2 to 2 only and back up to 3/2.

Which is a bit sad, but also seems like it would allow this use case perfectly (assuming this was done on purpose and not just an oversight).