Yes, and every package specifically defines the exact version of its libraries that it needs and the system symlinks everything together package by package, so there’s no chance than an update will break something further upstream. The configuration file also controls things like MySQL configuration and user permissions so you can get literally the exact same system. I think even docker doesn’t control for library versions with its regular configuration.

EDIT: And it keeps older versions of the configuration file and its symlink arrangement around, so if something goes wrong, you can reboot the machine and select an older version from the bootloader.