@saj has gotten to the bottom of this issue. We resolved it in our infra. Most self hosters have since worked around it.
The mechanism we used in the past to upgrade PG in our open source image had some inherit safety issues due to libc changing under the hood between PG versions.
I think the issue is now mostly gone in the wider ecosystem, though some old upgrades may still face it. It is going to be a nightmare fixing our existing open source upgrade script and deal with the enormous matrix of PG upgrades.
That said at least we are very aware of the source of the issue now and are better poised to address it going forward.