I remain worried about prompt injection style attacks against self-driving cars.

Imagine if someone finds a weird image pattern that gets misinterpreted as instructions and hangs that off a bridge over a freeway.

It'll get rooted over the uplink/WiFi/BT long before that. Probably even more likely for non-SDVs.