[vagrantJin]

how do car auto updates work?

I would inclined to believe that maybe the manufacturer sends out an email or sms to notify you of am update and then you choose the time, while also being given a change log of what exactly is being updated.

otherwise what would prevent a bogus server asking for an update you have no idea about and installing something malicious and - whoopsie daisy - your car grows legs and disappears?

[jeffbee]

Yes, I have a proper car from a real car company. They shipped working software the first time and "updates" are actually recalls for which the owner is notified, at the time of annual service for minor issues, or by mail for major issues.