How Does “Role-Based Access Control” Help Secure the Upgrade Mechanism?
Role-based access control (RBAC) ensures that only specific, authorized addresses or entities are granted the permission to execute the upgrade function. This prevents unauthorized users from calling the upgrade function, even if they know the function signature.
The admin key is typically assigned the 'UPGRADER_ROLE' and is often controlled by a multisig or DAO.