Yes, addon updates (without permission change) are automatic on most browsers. This is why an extension with many users can be worth a lot of money (especially if it has wide permissions), and the Chrome webstore has seen lots of adware/malware extensions (usually resold to less scrupulous owners).