Well it is only a useful point if you audit/analyse images anyway.

Supply chain risks is a serious subject but the fact you blindly update manually or automatically doesn't change a thing.