Thanks, Hawk, this helps a lot.
I think establishing tag groups and mandating/restricting their use will help a lot. That level of control slipped my mind.
My reluctance to separate the product from the version is that they’ll be notified whenever someone uses the 1secure tag, even in a support-style topic. Still holding out hope for subscribing to tags per category 
Though I guess the potential answer there is to restrict 1secure from being used in those support categories, since it’s already denoted as 1secure support.