I guess that it's like that in order to be able to update the executable for non-privileged users (who can't write to /Applications), which could be e.g. kids' user accounts in the family computer.