The Remote Administration security update process depends on the Update manage module. By default, this module will only check for a security update if a module is enabled. Disabled modules in your codebase will not be checked.
This behavior can be changed by visiting the settings page for the Update manager module at `admin/reports/updates/settings`. Check the box next to `Check for updates of uninstalled modules and themes` then click "Save configuration" at the bottom of the page.
After making this change, the Update manager module will include available security updates for disabled modules in the Available updates page. The RA security update process will be able to detect outstanding security updates for these and can update them if needed.