@noivad Well, neither of my options were great and v4.0.1 has the security patch, I decided to risk it.
I also trust the Mastodon devs a lot. I have been installing / maintaining / upgrading Mastodon (pretty much daily) for over 5 years and it never caused me to lose any data or end up with a broken installation that couldn't be easily fixed.
Obviously I also have backups :)
But yeah, not my favourite thing.