There's an even easier solution: AT&T serves the updates from within their network (during off-peak hours), and doesn't charge the user for it. The occasional extra 100MB per user seems like a small price to pay to keep the phones updated, especially if said updates come with better network handling (easing AT&T's burden) or patching up security holes.