editting ...
Well that is latest bootloader 2 full rom image .
You could use any older full rom, but then you'd have more incremental patches, from the "OTA" system (auto updates via settings, software updates .. or the OS saying "An update is available , install it ? " ), to install.
Its also a safe choice, because its using boot loader 2 as in 2BRA7.. 2 for boot loader 2. If you install boot loader 3, you can't revert to bootloader 2
You might avoid going to bootloader 3 if you are going to mess with the bootloader, as there will be far less chance of getting it fixed by USB or SDHC card.
From 2BRA7 you can install the zip to get to 2BRB5 . No choice there.
From 2BRB5, you have a few choices
1. <edit, delete this>
2. Install 2BRC1 , which is a beta version, and the next step from THERE is only some version with bootloader 3, whether you for 3BRD* or 3CRE* (the letter B for android 7, C for android 8)... * means there's some versions, but 3BRD1 and 3CRE7 are the official versions released to the public... See att's help on the S7 active
3.. Go to Oreo with bootloader 2, which is a dead end in terms up upgrade path, as bootloader 2 is NOT a feature of any official OREO release
4. Go to bootloader 3 ... either from 2BRC1 or from 3BRD1 ... which are the stepping stones of official releases to get to the latest, very recent, official release 3CRE7