Technically, uploading additional applets is possible, but we only do that in customer specific projects.
We do also add functionality to the core applet as part of customer projects. Actually most of the functionality added lately (Public Key Authentication, XKEK Key Domains, AES support) are the result of doing customer projects.