I wouldn’t recommend manually overriding the base image - that’ll mean using an image which we haven’t tested for production use. Plus there is the risk of forgetting to unpin, as you said.
I’ll look at whether we can bump the image soon. But it’s worth noting that all image-processing is now sandboxed to defend against the kind of vulnerabilities which were present in libheif: