auth.updateUser vs auth.admin.updateUserById

I'm a bit wondered about the documentation of the above two functions. For admin.updateUserById it says that auth.users.user_metadata can only be modified by the service role. However, in auth.updateUser it is also possible for the user to modify auth.users.user_metadata. Is this an error in the documentation (and should be fixed) or do I understand something wrong here?