It requires a weekly connection, which they implemented so that if there were a bug that were in an upgrade they could deploy it reasonably quickly. But as you say, it can be disabled, because it's open source.