But the initial dialog was more like
Q: this is good steel still, why not use it?
A: steel is never ideal, that's the problem.
Risk manage us nginx please. At least write out the steps, you must have a checklist or something, right?
Let's be honest, we just apt install it and read vulnerability reports when they hit /news.