From what I've read (I don't live in Massachusetts), the app is installed via the auto update channel, but it explicitly asks permission to activate.
If you think this is bad, the commercial apps that have been auto-installing for years, without notifying the user, should have you throwing a conniption.