Why are you concerned with Sparkle? Is it because it's a third party library or whether or not iTerm2 makes HTTPS updates?

It seems a little debugging with LittleSnitch/Charles would glean an answer how the requests are made and what, if anything else is. Perhaps a ticket https://iterm2.com/bugs is warranted.