That's correct. Any functionality that can be updated and change how the system works at the whim of a third party (not the user) is essentially a backdoor.

What would you propose as the definition of a backdoor that does not include the above?