sysadmins CI is hoping the machine still boots after an update. Unless you are lucky you got two identical machines to have a test env.

Also the case of 'learning that someone did updates directly on AWS console instead of terraform and losing 0.5 or more days cleaning up the resulting mess'