Thank you for this informative comment (where do you learn more about the interesting stuff?).

Isn't there a nice way to have it both ways, i.e. automate all changes in a script, and roll it after each image update? Assuming most things that may need to be hacked away don't see breaking changes after each update?