you're overestimate the complexity here. these are homogeneous devices it'll be very easy to update them safely. the other approaches are actually more complex and error prone due to bit rot.

having a frequently updated system ensure you're constantly exercising the code paths involved. and your change differential for regression testing is much smaller.