Can the images be updated after the organizational data is gone? If not, is there a security concern, since vulns are likely to be discovery in future?