I have the keyboard plugged into a monitor and accessing the USB hub is seriously complicated, so that's not really an option for me.
But I could try locking the system. I just hope I won't lock myself out for few hours, because I have pressed Enter multiple times while cleaning it.
It would be nice if they could do the update with a single reboot. It is annoying to type LUKS password multiple times.