Not all updates happen automatically, and computer attacks often occur because people or businesses are slow to adopt patches sent by software companies to fix vulnerabilities—in essence, failing to take the medicine the doctors prescribe. In this case, the medicine itself hurt the patients.
Kudos for a helpful tech explanation of the unique nature of the crash in this WSJ article about the CrowdStrike update.