There are two backporting in Ubuntu repositories: security backports and normal backports.
Security backports are enabled and installed by default each day. They are provided through the codename-security repository. This are the same as RH backports that you were reading. Others backports are enabled but not installed unless you ask specifically for them, a behaviour that was taken from Debian instead.
The use or not of apt has nothing to do with this fact rather than apt is the one installing them.
I'm not sure what they mean by "module".
This is apache modular system. You can attach modules to change, improve or expand the functionality of apache.
For the example scenario mentioned in the link, it sounds that, in ubuntu, if users only use packages managed by apt, there is no need to backport packages in the sense that RedHat means. Is it so?
I explained what it the common points of backports between RH and Ubuntu. So in this specific case, it means that since they aren't altering the functionality of apache, just hardening or closing a security hole. Modules depends of the functionality of apache, and business might not like to update their stuff.