It's referring to system updates. The need to update your MySQL version, or your Bash version when there's an new vulnerability. All the things you have to do to keep a server on the internet secure and operational over time.
I assumed as much. But someone still needs to do that for the server hosting your static website. And for a dynamic site, you still have the option to offload operational concerns to a third party.
