Is that a problem in practice though? Updating libraries or the base image that one's code depends on always has the risk of breaking from API changes or regre

Is that a problem in practice though? Updating libraries or the base image that one's code depends on always has the risk of breaking from API changes or regressions, and in a container, at least it's easy to reproduce the issue.