Why does the 1090 ES use the same frequency for both uplink and downlink?
It's a broadcast protocol - devices spontaneously announce themselves for listeners to hear. There are no interrogations to put on a different channel.