Yes, that happens sometimes when installp doesn't get all the pre- co- and if-requisites right. I routinely rerun updates multiple times until nothing gets installed any more. It is the same with...
if you install e.g. OpenSSL libraries on your server and every application on it uses your standard OpenSSL libraries, then it is your responsibility to patch them.
Exactly. SSL is, basically, implemented as a (shared) library. Applications use from that library whatever they want to use. If they want to use insecure protocols they do it and if they are...