We have running in SASS with production and three sandboxes, the app are installed and published as PTE, if the update is applied all the apps that have different versions in each are unpublished from any and all. So after an update is deployed by Microsoft we have we have to reinstall the apps. If they are not published as DEV I don't see why this would happen, and never in Production as it does.
