OTA updates are divided into package-based and image-based models. The image-based approach supports rollback through A/B partitions, whereas the package-based model installs .deb
files directly on the active A partition, and its rollback mechanism also operates within the current A partition. It does not require image-based updates. Is my understanding correct?
There is a special case: for example, when installing a component like OpenSSL, a failure could break network connectivity, making it impossible to reach the device. For this kind of risk, should we choose the image-based approach to install OpenSSL?