We struggled a bit and largely succeeded in consistency by hand—picking the patches and using automation to drive them.
What we couldn’t do was get to both consistent and really timely patching states but this was a decade ago where that was arguably slightly less important.