The notion of "updates" for most rom users (I'm on Cyanogenmod), is literally a flash over the existing rom.

However my busybox updater app does run in the background and does update busybox as needed automatically. Same with my su updater. So I suppose parts of my android are indeed auto-patched without my noticing.