Tanium has some common apps pre-packaged and regularly updated, you could just setup an ongoing deployment for those to automate keeping them up to date with minimal work on your part.
If you need to update something not on that list, you will need to make an upgrade package yourself with the updated installer or files.
Whether this is actually easy or not really depends on the app vendor and the software. It’s usually straight forward, but not always. But that’s the case with literally any software deployment solution.
I have one app in particular who’s install and config essentially un-automateable. But it’s a shitty LOB app that was written in the 90’s to be intentionally obtuse to prevent privacy, hopefully that’s not an issue in your case.
I suppose it’s the natural result of wanting to keep the show on as long as possible, when you’ve only got one good idea for the story arc. You need a lot of filler.
I’d like to see more shows done in the style of Babylon 5, where the creator had the whole 5 years written out from day 1. There was very little in the show that felt like filler or treading water.
Which also may explain why books are being brought to TV more frequently these days. But, TV showrunners have a bad habit of taking a good novel and totally mangling it in the translation to TV, so it’s not a guaranteed win.