I think it's probably a bad idea because by using explicit instance IDs, if an instance is trashed and a new one spun up outside of Pulumi, it probably wouldn't be updated

That is the problem with provisioners as well - ideally resources should be configured to self-heal

Yup

The power of real code instead of configuration DSLs 😉