Your company is migrating a customer relationship management application to Azure. The development team wants to minimize infrastructure management overhead while maintaining control over the application code and configuration. They are evaluating whether to use Azure SQL Database (PaaS) or SQL Server on Azure Virtual Machines (IaaS). The security team asks who will be responsible for applying security patches to the database engine. What should you tell them about patching responsibility if they choose Azure SQL Database?