Updating a streaming engine enabled dataflow pipeline for security patches of worker container OS

[Sathish_tu_ns]

As per the below doc on streaming engine, 
https://cloud.google.com/dataflow/docs/streaming-engine
Its mentioned as "Improved supportability, since you don't need to redeploy your pipelines to apply service updates."

Does this mean, if there is a security vulnerability in the dataflow workers VM instance as per the security bulletin page, then Dataflow backend service will take care of the update of the workers VM instances OS and we don't have to do anything manually as per the updating a pipeline page.

thanks in advance for your answers.