Using Ubuntu in prod means that updating might change python versions or something without warning, not updating means not getting patches
This means that one should use smaller and more consistent pieces in prod, rather than larger ones
♲ @DLangille@twitter.com: Vuln app. Update it.
Vuln OS. Apply the patches.
Do not say that your application will break if you upgrades the vuln app / OS. It is your job to keep the application current and running with all upgrades.
Deferring such work puts both the application and the users at risk.