Updating the system swaps out the old OS image for the new one; it’s both fast and safe. And you can keep around the old OS image (three of them, in fact) and easily roll back if you have a problem.

So an entire OS image is written to the SSD whenever something within it is updated?

I hope they employ de-duplication, or some other way to avoid wasting NAND cell life.