This is a draft answer. Alternative answers are welcome.
Scenarios that don't pose a concern
Scenario: A valid or invalid Taproot spend makes it into a mined block before activation (block 709632). It is just treated as anyone can spend as no one on the network is enforcing the Taproot rules until block 709632. This has already happened (executed by 0xB10C).