"Known vulnerabilities in application libraries are just as risky as those in the server dependencies, and the responsibility for addressing vulnerable app libraries falls to you – the function developer."

This isn't any different from the non-FASS world, but it is a good reminder that you still need someone doing regular maintenance.