Ubuntu, ownCloud, and a hidden dark side of Linux software repositories (PC World)

Lennart approach still requires /somebody/ to update the packages in base image when (not if) there are security issues in core libraries and then the users needs to know that he or she has to update the base image... - from security PoV that's unworkable

and if you don't care for security - just don't update at all, the software will continue to work