It would seem you're right. I can't find a way to confirm what Guest OS version I'm on (WA-GUEST-OS-*) but running Get-AzureOSVersion has newer versions than what's shown on the site and checking installed updates on the server shows that this has been patched. That is exactly what I wanted to see, thanks!