It is the eeprom file which changes, not the pic. Think of it this way - the eeprom (eg 24c16)holds the keys, the pic (eg 16f84) holds the program.
And yes, some program files (ie "hex" files for PICs) DO allow for remote updating of keys. Those that do are clearly marked as such either at the downlooad site or in the associated readme.
2old