For security and decentralization reasons, only functionary operators can upgrade nodes. By design, no single entity has remote upgrade capability, and there is no auto-upgrade functionality. The functionary software requires a manual upgrade, meaning a technician must be physically present in front of the hardware.
More centralized systems are easier to coordinate bug fixes and upgrades for, but blockchain security derives from operational decentralization and a defensive shield of many full node verifiers.