A fleet needs controlled guest package updates. Which operational design is appropriate?

1. Reuse a shared root password in all images for simpler access.
2. Update every production instance simultaneously without testing.
3. Assume Oracle patches all customer application packages automatically.
4. Use supported fleet-management tooling with staged rollout, maintenance policy, and validation.