Nobody asked, but a quarter century ago we used FreeBSD stable with current ports in a small business setting. A mostly unchanging base system but always the most recent user facing software (KDE iirc).
Linux distros only recently started doing this with the rise of flatpaks on top of immutable distros (or Debian stable).
pfSense is -CURRENT, Netflix OCA is -CURRENT, etc. It's not too hard.
username checks out