Time is a precious (and really expensive for SWEs) resource, why should one spend it on updating certs and instances?

They shouldn't, that's why self hosted PaaS already do it for you, it's not a differential reason to use cloud services instead just because they do it for you too.