The findOneAndUpdate() operation is ensured to be atomic at the document level, so you are safe, no race conditions will happen.
findOneAndUpdate()