Will the root CA list become outdated if I never restart/upgrade the OS? Or does Ubuntu periodically update the root CA list in the background automatically (without restart/upgrade)?
Root CA certificates live in the package
ca-certificates. It is very rarely updated. Updating this package does not require a reboot. Note that Firefox uses its own certificate store.