Oh, also, that literally took three hours to do the upgrade (which was three upgrades: the Ubuntu 16 patches required to upgrade to 20, the upgrade to 20, then the upgrade to 22). It wasn't all active time, but I couldn't do something else entirely because I had to answer prompts to keep the process going. Then, I had to figure out why nginx wouldn't start. (proxy_pass statements failed because the server couldn't resolve hosts because /etc/resolv.conf was filled with some garbage. I don't know why the "resolver" statements in the nginx config didn't kick in, though.)
Sucked, but I guess it's fair for having to only do it every four years or so. (And you do have to do it. I've seen people not do it and get pwned, as they used to say.)
It would be nice to just have a bunch of lambdas that have the servers under them maintained by someone else, but you can't just pick them up and move them elsewhere easily. Also, they could easily get phased out in some fashion in seven years.