How Can Time-Locks Mitigate the Security Risks of Mutable Contracts?

A time-lock contract introduces a mandatory delay between when an upgrade proposal is submitted and when it can be executed. This delay provides the community and security auditors a window of opportunity to review the proposed change.

If the change is found to be malicious or flawed, the upgrade can be vetoed or the contract can be exited before the change takes effect.