> even allowing to connect your phone will require full certification

I am not sure I understand this.

I am aware that manufacturers benefit from spying on people through car telemetry, or else they would not shoulder the cost of providing a cell plan. But, I, the owner of the vehicle, have every right to literally cut the cord (or simply unplug and remove the cellular modem).

> and yeah, your phone gives all the deniability and randon ids, etc. but if you allow apps to access location it's game over.

I don't. I run GrapheneOS (fully degoogled), and the only apps allowed to access location services are OSMand and a self-hosted Home Assistant instance. Of course that does not change the fact that millions of other people are being spied on.