apt-get update; apt-get upgrade after you try that on a clone machine. it's not a PITA unless you're super lazy which apparently many people are.
Remember that those machines all have slightly different software on them, so it's not simple to automate. Unless you're manage systems with something (eg puppet) it's not just a PITA or a question of laziness - it's a real task that takes up hours, not a quick 15-minute job you run over a coffee break, and that's assuming no breakage.
Mind you containers don't help with this either...