The safest thing to do, is not to run Knots, and not to run the latest PR of Core

The safest thing to do, as is often the case in Bitcoin, is to not change your node software

Instead, learn to edit your own relay policy settings

'Upgrading' is not the upgrade you think it is