Then they should get the data in another request, in my opinion.
The PATCH command patches the data and returns information about whether the update was successful; its responsibility is not to return the whole resource. Also, because returning the resource isn't needed in most cases, you would end up returning a lot of data that would be ignored.
Patching the data and then fetching the current resources sounds like the right approach to me.