My understanding of this capability is that it started with the browser component and grew from there, suggesting that it happens automatically and there is not

My understanding of this capability is that it started with the browser component and grew from there, suggesting that it happens automatically and there is nothing you need to check. But someone has pointed out that all the Framework vulnerabilities are still listed as being addressed by full, old-fashioned security updates, so I must admit that there is something I'm missing here.