Tom,
Thank you for your quick reply.
I don't mind having more work, but we need to know manual updates (and security patches) are possible as a supported path.
Since I'm sure there are other forum member/proxmox users from the Fintech or other regulated domains which probably have similar...