If a user has authenticated previously at a context level of "bronze", then the new SP requests either "silver" or "bronze" (in that specific order), the MCB will return "silver" even though the user has not completed that level of authentication.
The change/fix is to force upgraded authentication in this scenario. A new option "showSatisfiedContexts" was added to control the behavior of whether already satisfied contexts will be shown in the selection list. The default behavior is false, to not show already satisfied contexts/methods in the list. Only the other levels would be shown.