Similar to the attack on Ukrainian systems, which was also thorough a centralised update system being compromised.

It is that simple.