The safest thing would be #3, and it's always the option I take when doing classic upgrades. I think even with #2 some files get written to while the user is browsing the forum even if they can't write. That's what potentially leads to problems is if a file is being written to at the same time it's trying to be imported.