Mostly the second point.

They already collect and track you, even with car play. I strongly recommend this CCC talk, where they hacked a Volkswagen database that contained unfiltered, high-accuracy, timestamped locations of a large majority of electric cars from VW group.

Based on that they were, for example, able to identify cars owned by members of Germany's security apparatus: where they work, where they live, where they drop off their children each morning. Who visited brothels.

https://www.youtube.com/watch?v=SGzoXbbth0s&t=30m

Just curious, are car manufacturers required to obtain explicit consent from owners for collecting such data according to GDPR? Or German car lobby's pocket politicians were able to carve out some exception for them?

The frustrating thing is I bet they’re still tracking and collecting this when you stop paying for the tracking / telematics.

good thing that brothels are legal in germany.