Or… Malicious users could learn of some critical security flaw that has been patched since that version, and exploit it.
Regardless, if any end user truly needs to find out what the version of Discourse is, they just have to check their browser console:
Discourse itself will do that on every major version bump.