Fully trustless approach

The only fully trustless approach in upgrading smart contracts is to give users their own Proxy contracts and make them the owner so only they can upgrade when they want to and if they don't want tom then they don't upgrade the contract.