The answer to question 01: This type of OS does not support patching of individual files so the whole OS has to be replaced with a new version. Vendors keep track of which version first addresses a specific security advisory. The answer to question 02: Some patches cannot be uninstalled, so reverting the update would involve reinstalling the OS or image. In this scenario, a configuration backup allows you to restore settings more quickly and reliably.