My approach is to understand the underlying principles before engaging with a new concept.
Upgradeable contracts can be implemented using proxy contracts. The administrator key that controls upgrade permissions is itself a potential risk.
Risks don’t just come from the contract code: price feeds, dependent external protocols, administrative permissions, and hijacked web front ends can all cause problems.
Ethereum, where $ETH is located, is one of the earliest public blockchains to support general-purpose smart contracts. Currently, 1854.64.
Anything I haven’t covered? Let’s discuss in the comments.

These are personal notes. Make your own decisions before taking action.