For an appliance where they control the system, they could just ship a stable Debian/Ubuntu/whatever LTS release with just the kernel replaced. (Hetzner does this, actually; their rescue system is a netbooted Debian system with a bleeding-edge kernel.) The kernel has a stable userspace ABI, so you can generally take the latest release, build with the same config, and drop it in and have it work.