Agent updates via liveproxy?

Technically the livestatus API is for monitoring data and commands to the monitoring core.

The agent updates are distributed by the setup component which is something completely different and part of the web application. Hence the requirement for port 443 from remote to central site.