I don’t.

Yeah, hot take, but basically there’s no point to me having to keep track of all that stuff and excessively worry about the dangers of modernity and sacrifice the spare time I have on watching update counter go brrrr of all things, when there’s entire peoples and agencies in charge of it.

I just run unattended-upgrades (on Debian), pin container image tags to only the major version number where available, run rebuild of containers twice a week, and go enjoy the data and media I built the containers and installed for software for.

The screw-ups keep mounting like they want to be Google.

They (and we)'ve got to admit, the solution is not going to come from within their (managerial) ranks.

At this point I’d be happy to offer my services as a BDFL for Mozilla, at but a small fraction of the wages of any of their C-suites.