"System administrators update them in-place with various administration commands, e.g. a RPM or APT package manager or a configuration tool such as Cfengine."
Just to keep this particular meme from continuing:
rpm and dpkg are comparable commands, not rpm and apt.