patch releases, especially security patches would only have a small number of changes that might allow me to take a full new release but only update the changes to the release i already have.

but it would take some handcrafting to make sure the new files are at the end of the ISO so everything else stays in place.

technically this should be possible since ISO should allow for adding files given that it was designed for write-once media.