On: In internal memo, Apple addresses concerns around ...

[sneak]

Unattended autoupdate is indeed insecure, as the Solarwinds hack nicely illustrated.

When the vendor can execute arbitrary code on your machine without intervention, that's effectively a backdoor of any/all kinds.