Composer question

There are no auto-patch system, as there are no system that's smart enough. If we would replace your files in e.g. /app/ when a new file becomes available (in /vendor/), it would complete remove any changes you have made. Destroying your website/application. That's why we don't replace any of those files.

You need to compare the changes made in /vendor/ with your own files in /app/. Differ them and apply it. There are no logic in those files, all that are handled in /vendor/. We may introduce some new configuration variables in e.g. /app/Config that needs updating, but as we don't know if you have changed them or not, we don't touch them. Better safe than sorry. As you (and others) will be going to this forum and scream of anger, for destroying your website/business.

That was a clear explanation, thanks.
And the system folder in vendor/ is used by my app, meaning that any update in that system folder affects my app, right?