The point of argument is that it no longer becomes a security issue to allow customOS on the infotainment system because it absolutely has no connection to the engine computer.

This is not an architectural issue. The threat isn't a bad OS causing the car to explode. This is a safety issue where the car is required to prohibit certain things - such as video playback.