Not an expert in how the update process works, but the update certainly contains all the changed files, of which there is usually a lot. (I would think this is every project that has had a source code change internally…) There are number of shared- and kext-cache related things that also run afterwards.
https://news.ycombinator.com/item?id=22688198