It's so if you screw up and ship a version that crashes, you can still probably be updated. The updater is a tiny piece that only updates, and is itself not updated very often.
It's like an attack surface thing, but the attacker is Murphy and his law.
It's like an attack surface thing, but the attacker is Murphy and his law.