I mean, you already are "executing a binary coming from Muse groups server" if you downloaded Audacity from their website. How is an auto update mechanism a backdoor? You have to accept a modal for it to run the downloaded binary.

I guess it could be improved by using and verifying signatures, but it seems pretty on point for a standard windows software auto update feature