Redundancies and failsafes are always a best practice in engineering work. This is no different.

I mean, yeah? You give anything a connection to a global network with billions of people, and there will always be a chance for it to be exploited. Hell, even my personal OpenVPN instance for remotely accessing my home servers has to fend off attacks.

This is why my next vehicle will be a slate truck. Zero internet connectivity by default, and updates can be done via USB-C from a phone (which can be vetted as needed).