I'd think the phones home part is an answer many would like to know.
It is hearsay (person from a security firm told me, don't remember which one). I'm very curious about the update mechanism. Either way, as a Java app it should not be too difficult to decompile it.
IDA Pro is commercial. Only very limited versions without decompiler are free as in beer for personal use.
You might also be interested in Radare2 (with Cutter being a Chrome frontend). The command line utility r2 even has syntax highlighting.
There are plugins for all of these as well. AFAIK all written in Python.