If I were them, I'd go with something that provides an immutable root FS (or at least immutable /usr) and atomic whole-system updates, the way Chromium OS and Flatcar Linux (former CoreOS) do. IIRC, Balena does this for the base system, but adds containers on top.