It’s actually a problem with the implementor allowing software to update itself blindly like this. I’d never enable “auto-update” in critical infrastructure. Completely laughable minor league move.