ACL failure during device update?

While updating devices (all Omada gateway, switches, AP) I noticed that my Tapo camera was suddenly detected by the Tapo app. Only briefly and then it's been offline since. I have a few VLANs with ACLs to isolate and protect each of them. The Tapo app has never worked properly across VLANs which is its own annoying problem, but I work around it.

What happens to ACLs during device updates? Are my VLANs unprotected during that time? If so, is there a safer or better way to perform updates?