TBH i would rather put that time and energy in my startup instead of maintaining a FOSS stack for my company.
Surely you maintain your start-up tech on F/OSS, as most of the internet does, so just use the person who types 'apt-get update && apt-get upgrade' on your service to do the same on your local VM.
Or leave keep it local and literally never update it.
It wont melt.
Yes, if you care about things like not getting oWn3d and having your customer data exposed.
The mouth salivates at this prospect.
Yes, please set up your Jenkins server once and never look at it again...