The problem is that the main container can (and usually does) rely on other layers, and you need to pull updates for those too. Updating one app can take 5-10 individual pulls.