In my experience, bundles that aren't managed by a partner will often present you with a list of components that are being changed (created/deleted), and even give you options of which changes you want to overwrite your current configurations. That allows you to have some say and control for what gets changed, and you control the "when".