System updates are not concerned. Here, we are talking about applications whose update mechanisms are completely flawed. As mentioned, these applications do not use TLS or cryptographic signatures to authenticate the connections or the downloaded software.