But it does for me and as you can see at my 3rd screnshot above there are new/updated jar files in the lib folder and the io file is still there,
Did you check the lib folder after the update? Seems the update is removing the jar files then for you somehow.
Maybe any antivirus tool is blocking the extraction of the update as it will be downloaded to your windows temp folder (or similar).
Backup the files before the update, do the update and paste the backuped files into the folder but do not overwrite exisitng ones as this would replace the new jar files of log4j with the old security troubling one again.
Here is the Minion 3.0.9 libs folder with all jar files:
Minion 3.0.9 32bit jar lib files