A little confused, you say you don't want to disrupt the containers, but https://github.com/bottlerocket-os/bottlerocket#updates seems to indicate you still have to reboot for the update to take hold?
[1] https://github.com/bottlerocket-os/bottlerocket/tree/develop...