Not good to hear they're based in Moscow, but that ship has presumably already sailed and sunk if you're running the auto-update code in an existing Audacity installation.
What other concerns besides national origin exist with this code? Nothing seems to qualify as a "back door," certainly.
What other concerns besides national origin exist with this code? Nothing seems to qualify as a "back door," certainly.