I don't understand how they can get away with this even. Imagine if they discover a root exploit in whatever old version of Android they're running.

Now if there's no update, people can just hack your car via the internet or Bluetooth. While your infotainment can't access the ICU usually, they're connected via Canbus which has zero provisions for security, and taking over your whole car is usually quite easy from this point, as many have demonstrated.

And even if there's a fix, you have to drive to the service center who might not even update your car for free.

I'm just surprised how this hasn't ended in disaster already.