Proxy Contract
A contract that forwards calls to a separate implementation contract, so that the logic can be replaced later without changing the address holders interact with.
Upgradeability is a genuine engineering need and a genuine risk in one mechanism. The code that was audited is not necessarily the code running tomorrow, and whoever controls the upgrade key controls the token.