screig, good points. We've been working on radical improvements in these important areas.
1. We added in-place Postgres version upgrade to Hyperscale (Citus) when we introduced more than one major Postgres versions. You can initiate Postgres upgrade by clicking the 'Upgrade' button in 'Overview' page of your Hyperscale (Citus) server group.
Of course, as the first step we recommend to create a clone of your server group, upgrade it, test and change your app if needed, and only then repeat these steps on your production server group. You can do all of these operations - cloning (Restore button next to Upgrade button), upgrade - from Azure portal.
On a related note, Hyperscale (Citus) currently supports Postgres 11, 12, 13, and 14. Yes, Postgres 14 too, the one that was released couple of weeks ago.
2. Private access: This is another important area. Recently we launched preview for Private access in Hyperscale (Citus). It is implemented using battle tested Private Link technology and allows you to create private endpoints for coordinator or all nodes in your server group (your choice). Once private endpoints are created you can access your Hyperscale (Citus) nodes from within selected virtual network, peered local and global virtual networks, connected on-prem sites, and via Express Route.