Cross-posting as this relates to, and addresses some of my questions above.
I also note that in my post above I conflate the proposal execution timestamp with the subnet deployment point in time. The proposal execution just updates the registry (as far as I understand). The subnet itself is later responsible for pulling that config from the registry and updating itself (hence the delay between proposal execution and the subnet going down briefly).