I'm not gonna be able to explain to you why that's unacceptable lol. it amounts to "hassle" but I suspect you're gonna have what amounts to a moral objection to that so I'll just leave it there. (is there a way to have a patch you can set on dockerfiles so you can use automatic updates and automatically apply your changes? then you only have to get into it if you touched something that changed)
I've started using ansible to set up shit, maybe I can have an LLM routine that converts dockerfiles into roles or something.