Malware positives with official Darktable v4 win64 executable ?

Yeah, it’s odd. I realise that hybrid-analysis doesn’t show necessarily malware. But the connections to suspicious IP addresses is very odd to me. Why would a photography application try to connect online?