Your examples are poor. LetsEncrypt and certbot automated cert renewals a long time ago. If you’re still having to manually renew your SSL certs, you’ve picked

Your examples are poor. LetsEncrypt and certbot automated cert renewals a long time ago. If you’re still having to manually renew your SSL certs, you’ve picked a crappy vendor. Security updates are also as simple as a cron job that runs your favorite package manager update command. You want to run those commands on multiple machines? Use the several different FOSS orchestration platforms that make it easy for you to deploy and configure your distributed services. Sure, these things take some initial set up, but it’s nothing that can’t be accomplished in a few business days for a start-up.