In short, I would only do this if the time between the clone (As a backup) and the upgrade is non-existent.
If there is any delta, based on the time span between clone and upgrade, the vShield Manager might be out of sync and there would be some manual clean up process. You gotta think that vShield is a live system with a DB recording where Edge Devices are and is constantly in sync with vCenter, and vCloud Director syncs information from vShield.
The vCloud Director part is not that big of a deal. the Database and some config files are more important than the OS running the application. When you do the vCD upgrade, it's basically doing an RPM update (remove install) then you run a command to update the DB schema to correspond to the current version.