It feels like there could be a middle ground here where the Pi would show some annoying error message at boot that the RAM doesn't match the CPU's anticipated spec.

Any sellers caught doing this would quickly be flagged by the community as unreliable; also purchase protection is pretty strong these days.