There should be a protected branch created for each release for changes at a later date. All the required checks should be enforced. Then every release branch including master will be protected, always.