I wish we could treat services as black boxes like this, but who can run services these days without keeping on top of dependency, security, and platform update

I wish we could treat services as black boxes like this, but who can run services these days without keeping on top of dependency, security, and platform updates? The inevitable deprecation of some of these means surgery will soon be required to keep a service running and secure.