Hi Gaurav! A hermetic ephemeral environment doesn't get updates, but they're very short-lived, they just live for the duration of a test and then get torn down. So the need to get updates is not a big concern.

I don't know about open source, Google reinvented the wheel over and over again so it had a lot of proprietory infra!