There are some privileged FTP credentials hard-coded in the source code. It's just used to retrieve the version check message. There are better approaches that won't require baking in secrets like that.