@shazow.eth
If I were a black hat, I wouldn't waste my time trying rushing to front run upgrades, but I'd take my time carefully analyzing new upgrades for new vulnerabilities. In my experience, most bugs get added because someone who lacked context introduced a new feature while missing some nuance. (Could be you in the future.)