I'm still reeling from the fact that the macOS teams app have a local privilege escalation to root vulnerability for a while. Why does ANY part of teams run as root?.
Probably to auto-update? I can't think of any other even remotely valid reason.
Yeah it was the update, but even thats a bad reason to be honest, the only thing that changes without the privilege helper is the user gets a prompt for an update.