This is a great suggestion. However I would disagree with
“4.3.36 = Oldest / Most Secure version from Jessie stable contrib”
Debian package maintainers are notoriously untrustworthy. The modifications they made to the source is not usually known. Oldest versions of software just means it has older bugs and security researchers have had more time to find vulnerabilities in it. For application level security it almost never means “older is more secure” but just the opposite.