Since almost none of the auto-updates are using a secure connection (https/ftps) there is always a (small) risk.
But the same goes for downloading a update manually.
As long as you have the application(update) directly from the developer(s), you should not worry about it.