Two things I assumed were fixed

I went into the access-control docs looking for something else and came out with a shorter list of things I'd call constants.
The oracle first. There are two functions, one that submits a new price source for an asset and one that accepts it. Both sit under the default admin role. So the feed deciding whether your position is healthy is a parameter.
Then fees. A configurator role can update the fee rate on a specific order, and update market config including the treasury address and fee settings.

Neither of these is unusual. Every lending protocol has switches like this, and you want them the day a feed starts printing garbage. Morpho, Aave, all of them.
What I couldn't find on that page is a stated waiting period between submitting one of these and accepting it. The vault layer documents its timelock clearly. This layer, I'm not sure — and I'd rather say I'm not sure than guess.

If you could force a mandatory delay on exactly one of them, would you pick the price feed or the fee rate?

#termmax @TermMax $AAVE