[draw_down]

They do it where I work, because our ops and dev teams like it when deploys don't randomly break.

[toomuchtodo]

Devops here for a startup: We run our own repo for critical packages specifically to ensure AMI baking and deploys do not break when a package isn't available for whatever reason (and we pin to the package version).