How Does RBAC Relate to the Concept of Contract Upgradability?

RBAC is critical for secure contract upgradability. The upgrade function itself is a highly privileged action that must be restricted to a specific, trusted role (e.g. the 'Upgrader' role).

This role is typically assigned to a secure multisig or a DAO governance contract. RBAC ensures that only the authorized entity can initiate the upgrade, and it often works in conjunction with a time-lock mechanism to delay the execution, preventing a single compromised key from immediately deploying malicious code.