Depending on your paranoia level and will to be very much on the safe side, I encourage users to also save their config as two different files (one in the current config file and another one with a different name, not being the default config database). That way, if anything goes wrong, you have a rollback scenario without any doubts on the config file being modified/corrupted by the new code. Just in case.
10 years in TAC makes you always consider the "if it goes wrong" first 🙂