It's a do it once thing, though... ESPHome essentially keeps everything updated and secure.