Oh ok, so they still build and maintain a (fragile?) docker image with up to date build tooling for CI machines to use?
> (fragile?)
The Docker image isn't fragile, it's your software that risks becoming fragile if it's too strongly reliant on a specific environment.