Its probably an antipattern on a car to need an OTA "safety" update in the first place.

The safety update is physically removing the modem IMO. Can't be wirelessly broken into if you aren't on the network to begin with.