I think the best of both worlds, assuming you don’t need rebootless updating, is the distros that act as immutable for any given update set, but allow updates ala rolling release and just cache the previous image. This way you have the newest packages while having an easy recovery method if the update breaks things