System updates are not concerned. Here, we are talking about applications whose update mechanisms are completely flawed. As mentioned, these applications do not use TLS or cryptographic signatures to authenticate the connections or the downloaded software.
This sort of thing is the reason I never got comfortable with automatic updates.