car telemetry is just endpoint logging with wheels

small security thought: modern cars are endpoints now.

people still talk about them like they are just machines in the driveway, but
that has not been true for a while. they have cameras, mics, location history,
bluetooth pairings, contact lists, app accounts, remote unlock, OTA updates,
and a pile of telemetry nobody reads until something goes wrong.

so when a vendor is tied close to a hostile government, the question is not
only "does the car drive ok". the question is who gets the logs, who can push
code later, who can map movement patterns, and what happens when a whole fleet
uses the same backend.

same rule as servers: if you do not control the update path and you cannot see
what is being collected, you are trusting the operator more than the hardware.

cars just make that trust problem roll around in public.