This is insufficient. There needs to be a physical button that either physically disconnects every antenna and/or de-powers the transceiver.

They could store data and then dump it later when the vehicle is being serviced. Unless their privacy states otherwise, assume data is being gathered and sold. Other car manufactures have been caught selling travel data. It's not even that paranoid. Google has been fined in the past for secretly collecting location data in Android when offline and then relaying it back to HQ once the phone got a signal.

How would they do that? I'm sure you can buy some sort of aerospace component that has the signal integrity to do radios, but it sounds expensive. There's a reason these kinds of components (e.g. muxes) aren't usually physical disconnections.

Automotive power relays are at least a thing, but they're expensive consumables that have significant power draw.

In either case they would have had to add the components at design time and do the physical validation/testing, not ship it as a software update.

Kinda rich coming from someone who doesn't even have a valid SSL cert on the website in their profile bio...