Who’s idea was that to use unique names in the application to where it would be automatically blocked by strict firewall rules?
That has been the case for some considerable time now, the emergency update function checks if there is an emergency update and creates the unique file that will download and install it.
My firewall rules are fairly strict, but I rarely get any hassle from that - it is WinPatrol Plus that lets me know of a new startup entry, namely the emergency update.