From one of the printouts in the post, it seems that Papers Please is using a bundled and statically linked SDL.
So it would be the game developer that would have to update the version of the SDL library. The binary patching done seems like a good-enough alternative in the meantime.
I have the feeling such bundling of dependencies is fairly common when porting games for Linux.