Looks like that note is still accurate. We still dont update product certs until we install something from the corresponing repos.