The user agreed to the EULA which clearly states that they are allowed to do it.
I don't agree that it's "clearly" stated:
3. Upgrades and Updates
Upgrades and updates of the Software shall be provided to you by AVAST as long as and to the extent in which AVAST in its exclusive discretion makes such upgrades and updates available to the users of the free version of the Software.
They say upgrades will be "provided" and "made available". Neither implies automatic installation, IMHO. I (and I'm sure a large percentage of users) felt the "program update" update option could be used to decide if/when to install the provided upgrades.
If Avast meant that they wanted the option to automatically install program upgrades regardless of the users' program update settings they should have explicitly said so -- both in the EULA and as a warning on the "program update" option screen (IMO).