The just-released version 2.3 of WordPress includes an auto-update “feature” which phones home with information on the site; installed plug-ins, url, etc. It can’t be disabled natively and they don’t tell you they’re doing it.
WordPress founder Matt Mullenweg appears evasive and unhelpful about this, saying everyone else does it (perhaps, but at least they tell you they’re doing it and provide opt-outs) then says hey, there’s a fix for it (however it’s a third-party plugin, and not from WordPress itself.)
When Microsoft pulls crap like this, people can and do protest loudly about privacy violations.
WordPress is about the most trusted name in blogging, hope they don’t blow it.