Outdated Windows/Store Apps on Inactive Profiles

Question

We are running into numerous instances where Windows/Store apps such as 3D Viewer and Paint 3D are loaded on individual profiles and despite the files in C:\Program Files\WindowsApps being up to date, the installations in those profiles are not updating. This is causing security vulnerabilities for each app on each system we're seeing this on. We are looking for confirmation on the following things:

1. If files in the WindowsApps directory are up to date, do the apps automatically update on profiles upon login or do the apps only update after being launched by the user?
2. If the profile is inactive and we cannot delete it, is there any way we can force an app update on the profile?
3. If the #2 isn't possible, is there a way to remove the app from the profile?