The list of expenditures never authorized by Congress is staggering. You're spot-on about the authorization risk but it's just the latest in a perpetual issue. Congress has normalized funding "zombie programs" through autopilot appropriations rather than proper reauthorizations. Notable zombie programs include VA health, women's health spending, NIH research...
House Rule XXI (blocking unauthorized spending) gets waived a majority of the time. 50% of expired programs haven't been reviewed in 10+ years. 2023 alone saw $236B in improper payments.
So IMO while the buyout could get axed the pattern suggests they'll likely kick the can with another CR. Perhaps this administration will try to force a different tack, I suppose we'll see.