Perhaps the car is programmed to ignore all external signals for a while if it detects significant disagreement for a prolonged time, as might have happened if it had access to both WPS and GPS during the ferry ride. In such cases it would be safe to assume that something is being spoofed, and fall back to INS.