The problem is that I don't control our production systems as they are on-prem on clients sites. Meaning that any of my client can run "apt update && apt upgrad

The problem is that I don't control our production systems as they are on-prem on clients sites. Meaning that any of my client can run "apt update && apt upgrade" and I'm screwed regardless of what I do. This is in fact a good reason to keep "latest" on my side so that I know first-hand when things break.