Token Sets' protocol is upgradeable via a 2-of-3 multisig contract with no timelock. Token Sets claims to use Ledger hardware wallets to secure the signing keys.
Timelock: None ⚠️
"Ledger hardware wallets"
Token Sets Whitepaper (see Section 10)
Trail of Bits Audit Report (see page 32)